DTOO167 - Opening behavior for Email forms containing code or scripts must be controlled.

Information

InfoPath notifies and prompts users before opening InfoPath email forms that contain code or script. If this restriction is relaxed, InfoPath will open email forms that contain code or script without prompting users, which could allow malicious code to run on the users' computers.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft InfoPath 2013 -> InfoPath e-mail forms 'Control behavior when opening InfoPath e-mail forms containing code or script' to 'Enabled (Prompt before running)'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_InfoPath_2013_V1R6_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4), CAT|II, CCI|CCI-002460, Rule-ID|SV-242490r961779_rule, STIG-ID|DTOO167, STIG-Legacy|SV-53379, STIG-Legacy|V-17668, Vuln-ID|V-242490

Plugin: Windows

Control ID: c2c4b72f71cb1a49e8a3ac9608f8cb0738f9535e609eb978cff3210551bcb56c