Clear SSL Form Session Data

The OVAL Repository 5.9 2012-01-27T05:02:38.229-05:00 Clear SSL Form Session Data Mozilla Firefox This will ensure that the form data stored in an SSL Secure session is cleared when the session ends. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disabling Auto-Install of Add-Ons Mozilla Firefox ensure that no website is allowed to automatically install Add-Ons. Also, it will list how to ensure that proper notifications are shown when installing Add-Ons. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Sending LM Hash Mozilla Firefox Prevent Firefox from sending an LM Hash when authenticating to resources that request this authentication type. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Auto Notification of Outdated Plugins Mozilla Firefox This feature automatically detects when installed Plugins are out of date and notifies the users to update the Plugins. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Blocking of Reported Attack Sites Mozilla Firefox This configuration will have Firefox check whether the site being visited may be an attempt to interfere with normal computer functions or send personal data to unauthorized parties over the Internet. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disallow JavaScript s Ability to Hide the Status Bar Mozilla Firefox Prevent JavaScript from changing the Status Bar from showing the location of the content when a user visits a link or when content is being downloaded on a web page. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Block Pop-up Windows Mozilla Firefox The Pop-up Blocker is used to block Pop-ups which a website might open with or without any user interaction. These Pop-Ups can be used to open un-trusted malicious content. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Information Bar for Outdated Plugins Mozilla Firefox This feature automatically shows an information bar when installed Plugins are out of date and notifies the users to update the Plugins. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Remember Search and Form History Mozilla Firefox Prevent search and form history from being stored. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable SSPI Authentication Mozilla Firefox Firefox can be configured to leverage the Microsoft Windows Security Support Provider Interface (SSPI). Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disallow Credential Storage Mozilla Firefox Prevent Firefox from storing credentials for certain websites. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Virus Scanning for Downloads Mozilla Firefox Firefox can be configured to scan downloads for viruses. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Warning When Entering Insecure Site Mozilla Firefox Firefox can notify users when a user enters an insecure (non-SSL) site from an encrypted SSL site. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Prompting for Credential Storage Mozilla Firefox Prevent Firefox from prompting when credentials are entered in website forms so credentials cannot be stored. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Javascript Function to Move or Resize Existing Windows Mozilla Firefox Prevent Javasript from moving or resizing existing windows. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Javascript Functions to Raise or Lower Windows Mozilla Firefox Prevent Javascript from raising or lowering windows Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Displaying Javascript in History URLs Mozilla Firefox This will ensure that JavaScript URLs are not displayed in the history bar. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Always Ask Where to Save Files Mozilla Firefox Firefox should prompt for a location to save files every time. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Downloading on Desktop Mozilla Firefox Firefox can download content on the desktop or other locations. It is recommended not to download files on desktop. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Warning of Loading Mixed Content Mozilla Firefox Warn users when unencrypted data is loaded in an SSL encrypted session. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Accept Only 1st Party Cookies Mozilla Firefox Cookies are used to track valid session on internet websites. Securing cookie handling will help secure a user s browser session. It is recommended to only accept 1st party cookies. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Javascript Functions Disable or Replace Context Menus Mozilla Firefox Prevent Javascript from disabling or replacing context menus Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Caching of SSL Pages Mozilla Firefox Prevent Firefox from locally caching the content of SSL pages on disk. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Auto Update Mozilla Firefox Enable updates for Firefox and extensions installed on Firefox. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Javascript Functions to Hide the Status Bar Mozilla Firefox Prevent Javascript from hiding the status bar Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Warn When Sites Try to Install Add-ons Mozilla Firefox Will warn user when a site tries to install an add-on Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Delete Download History Mozilla Firefox Delete Download History Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Delete Search and Form History Mozilla Firefox Delete Search and Form History Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Closing of Windows via Scripts Mozilla Firefox Firefox can be configured to prevent script from closing browser windows. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Referer from an SSL Website Mozilla Firefox Firefox can be configured to omit the HTTP Referer header when the referring site is protected by SSL. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Javascript Functions to Change Status Bar Text Mozilla Firefox Prevent Javascript from changing the status bar Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Online Certificate Status Protocol Mozilla Firefox Firefox checks with Online Certification Status Protocol (OCSP) to ensure that the certificates are valid. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Java Mozilla Firefox Disable Java in Firefox Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disable Scripting of Plugins by JavaScript Mozilla Firefox Prevent Javascript from initiating and interacting with the Plug-ins installed in Firefox. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Blocking of Reported Web Forgeries Mozilla Firefox TThis configuration will have Firefox actively check whether the site being visited may be an attempt to mislead you into providing personal information (this is often referred to as phishing). Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Ask About Cookies Every Time Mozilla Firefox Prompt user for permission to use a cookie. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Warning When Submitting Clear Text Form Data Mozilla Firefox Firefox can notify users when a user sends form data to an insecure (non-SSL) site. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable Warning of Using Weak Encryption Mozilla Firefox Warn users when a website is using weaker encryption. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Delete History and Form Data Mozilla Firefox Prevent Firefox from storing the sites visited, information typed in forms, and downloads from Internet resources. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Disallow JavaScript s Ability to Change the Status Bar Text Mozilla Firefox Prevent JavaScript from changing the Status Bar when showing the location of the content when a user hovers of a hyperlink, a user visits a link, or when content is being downloaded on a web page. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Enable SSL 3.0 and TLS 1.0 Mozilla Firefox Enable Transport Layer Security for Firefox. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM INTERIM Mozilla Firefox is installed Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7 Mozilla Firefox The browser installed on the system is Mozilla Firefox Prabhu S A DRAFT INTERIM ACCEPTED J. Daniel Brown INTERIM ACCEPTED ACCEPTED