Enable browser legacy extension point blocking

Information

Sets the ProcessExtensionPointDisablePolicy on Microsoft Edge's browser process to block code injection from legacy third party applications.

If you enable or don't configure this policy the ProcessExtensionPointDisablePolicy is applied to block legacy extension points in the browser process.

If you disable this policy the ProcessExtensionPointDisablePolicy is not applied to block legacy extension points in the browser process. This has a detrimental effect on Microsoft Edge's security and stability as unknown and potentially hostile code can load inside Microsoft Edge's browser process. Only turn off the policy if there are compatibility issues with third-party software that must run inside Microsoft Edge's browser process.

Solution

Policy Path: Microsoft Edge
Policy Setting Name: Enable browser legacy extension point blocking

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-v99/ba-p/3249241

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Windows

Control ID: d7ef6492c3332ad81924415c120210de100ff8cceefaa51a40d310ce4e5e4bc9