6.6 Ensure that JSONP access via an HTTP interface is disabled

Information

The net.http.JSONPEnabled parameter is used to enable or disable JSONP access via an HTTP interface. Enabling this parameter also enables the HTTP interface, even if the parameter for enabling the HTTP interface is set to disabled.

Please note that this function has been Deprecated since version 3.2.

Rationale:

Additional network interfaces expose the system to a greater extent. Running unnecessary services may allow an attacker to penetrate the system via an unknown vulnerability.

Solution

Set the parameter value to false to disable JSONP access.

Default Value:

false

See Also

https://workbench.cisecurity.org/files/168

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: 8e809fc18c652c74ff78d77d23921c1369981837b31eeca3685851ccd793b649