3.11.37.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'

Information

This policy setting prevents the user from having enclosures (file attachments) downloaded from an RSS feed to the user's computer.

The recommended state for this setting is: Enabled

Allowing attachments to be downloaded through the RSS feed can introduce files that could have malicious intent.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\Windows Components\RSS Feeds\Prevent downloading of enclosures

Impact:

Users cannot set the Feed Sync Engine to download an enclosure through the Feed property page. Developers cannot change the download setting through feed APIs.

See Also

https://workbench.cisecurity.org/benchmarks/16853

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-10, 800-53|CM-11, 800-53|SC-18, CSCv7|7.2

Plugin: Windows

Control ID: f5c94d4e1ccfc8fd499398b3b50f60f815814731fae72cdd18113e3e90ae6ef8