UCF STIG Viewer Logo

Firefox formfill assistance option is disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-15774 DTBF140 SV-16713r2_rule Medium
Description
In order to protect privacy and sensitive data, Firefox provides the ability to configure Firefox such that data entered into forms is not saved. This mitigates the risk of a website gleaning private information from prefilled information.
STIG Date
Mozilla FireFox Security Technical Implementation Guide 2020-06-19

Details

Check Text ( C-16619r1_chk )
Type "about:config" in the address bar, verify that the preference name “browser.formfill.enable" is set to “false” and locked.

Criteria: If the parameter is set incorrectly, then this is a finding. If the setting is not locked, then this is a finding.
Fix Text (F-15991r2_fix)
Ensure the preference “browser.formfill.enable" is set and locked to the value of “false”.