7.7 Enable Extension Block List

Information

This feature enables Mozilla Firefox to retrieve a list of blocked applications from the server.

Rationale:

Enabling Mozilla to access the list of blocked applications mitigates the risk of installing a known malicious application.

Impact:

None - This is the default behavior.

Solution

To establish the recommended configuration, set extensions.blocklist.enabled to true:

Type about:config in the address bar

Type extensions.blocklist.enabled in the filter

Ensure the setting is set as prescribed.

OR

Open the mozilla.cfg file in the installation directory with a text editor

Add the following lines to mozilla.cfg:

lockPref('extensions.blocklist.enabled', true);

Default Value:

True

See Also

https://workbench.cisecurity.org/files/4299

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-10, 800-53|CM-11, 800-53|SC-18, CSCv7|7.2

Plugin: Windows

Control ID: a715818552aa7c07987e5e46e4c99f56da63d9ed71e448092cecd65678e9a8f2