Skip to content

Guide to the Secure Configuration of Firefox

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Firefox must be configured so that DNS over HTTPS is disabled.

    DNS over HTTPS feature may be disabled via administrative policy by setting <code>Enabled</code> under <code>DNSOverHTTPS</code> to <code>false</co...
    Rule Medium Severity
  • Firefox encrypted media extensions must be disabled.

    Firefox's Encrypted Media Extensions support playback of media content that is subject to Digital Right Management. These extensions may be disable...
    Rule Medium Severity
  • Enabled Firefox Enhanced Tracking Protection

    Enhanced Tracking Protection may be enabled by setting browser.contentblocking.category to strict.
    Rule Medium Severity
  • Disabled Firefox Extension Recommendations

    Extension recommendations may be disabled by setting <code>extensions.htmlaboutaddons.recommendations.enabled</code> to <code>false</code> in the p...
    Rule Medium Severity
  • Firefox must be configured to not automatically update installed add-ons and plugins.

    Firefox has a feature to permit installed add-ons and plugins to automatically update. The check may be disabled in an administrative policy by set...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules