5.2 Disable Closing of Windows via Scripts

Information

This setting allows the configuration of how Firefox handles scripts from closing browser windows.

Rationale:

Preventing an arbitrary web site from closing the browser window will reduce the probability of a user losing work or state being performed in another tab within the same window.

Impact:

None - This is the default behavior.

Solution

To establish the recommended configuration, set dom.allow_scripts_to_close_windows to false:

Type about:config in the address bar

Type dom.allow_scripts_to_close_windows in the filter

Ensure the setting is set as prescribed.

OR

Open the mozilla.cfg file in the installation directory with a text editor

Add the following lines to mozilla.cfg:

lockPref('dom.allow_scripts_to_close_windows', false);

Default Value:

False

See Also

https://workbench.cisecurity.org/files/4299

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a.

Plugin: Windows

Control ID: 2b5d9a3dde2b7c981f964e689d8994c6464ae887774779270e1337796b5dc687