5.4 Disallow JavaScript's Ability to Hide the Status Bar

Information

The Status Bar shows the location of the content when a user visits a link or when content is being downloaded on a web page.
Some malicious websites can use JavaScript to hide the status bar so that a user cannot determine the location of the content for hyperlinks and downloads.

Solution

Perform the following procedure:

* Open the mozilla.cfg file in the installation directory with a text editor

* Add the following lines to mozilla.cfg:

lockPref("dom.disable_window_open_feature.status", true);

See Also

https://workbench.cisecurity.org/files/1158

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a.

Plugin: Unix

Control ID: fbe828f96742ff3844a86c4e36f5fcc42778f44b2a54b2ebb5657fdd95284e3f