3.6 Set File URI Origin Policy

Information

This feature determines the restrictions placed on the scripts and links loaded into the browser from local HTML files.
Applying the same origin policy to local files will help mitigate the risk of unauthorized access to sensitive information.

Solution

Perform the following procedure:

* Open the mozilla.cfg file in the installation directory with a text editor

* Add the following lines to mozilla.cfg:

lockPref("security.fileuri.strict_origin_policy", true)

See Also

https://workbench.cisecurity.org/files/1158

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Unix

Control ID: f8c467b7d38f817309424265c22b6a9829146005d6a6e7524cb42a94a2b17f31