Detections
Analytics

FFOX-00-000009 - Firefox must be configured to block pop-up windows.

Information

Pop-up windows may be used to launch an attack within a new browser window with altered settings. This setting blocks pop-up windows created while the page is loading.

Solution

Windows group policy:
1. Open the group policy editor tool with 'gpedit.msc'.
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesMozillaFirefoxPopups
Policy Name: Block pop-ups from websites
Policy State: Enabled

Policy Name: Do not allow preferences to be changed
Policy State: Enabled

Optional:
Policy Name: Allowed Sites
Policy State: Enabled
Click 'Show...' and enter a list of websites to be allowlisted.

macOS 'plist' file:
Add the following:
<key>PopupBlocking</key>
 <dict>
 <key>Allow</key>
 <array>
 <string>http://example.mil</string>
 <string>http://example.gov</string>
 </array>
 <key>Default</key>
 <true/>
 <key>Locked</key>
 <true/>
 </dict>

Linux 'policies.json' file:
Add the following in the policies section:
'PopupBlocking': {
 'Allow': ['http://example.mil/',
 'http://example.gov/'],
 'Default': true,
 'Locked': true}

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MOZ_Firefox_V6R7_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-251553r960963_rule, STIG-ID|FFOX-00-000009, Vuln-ID|V-251553

Plugin: Unix

Control ID: 8a8b4eacd4f09b1a3d07fbb756b222618b9b68393d3d39925b063db7dbddf3fa