Microsoft Internet Explorer 11 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Security Warning for unsafe files must be set to prompt (Internet zone).
This policy setting controls whether or not the 'Open File - Security Warning' message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file ...Rule Medium Severity -
SRG-APP-000141
Group -
Internet Explorer Processes for Notification Bars must be enforced (Explorer).
This policy setting allows you to manage whether the Notification Bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification Bar is dis...Rule Medium Severity -
SRG-APP-000210
Group -
ActiveX controls without prompt property must be used in approved domains only (Internet zone).
This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. If the user were to disable ...Rule Medium Severity -
SRG-APP-000141
Group -
Internet Explorer Processes for Notification Bars must be enforced (iexplore).
This policy setting allows you to manage whether the Notification Bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification Bar is dis...Rule Medium Severity -
SRG-APP-000141
Group -
SRG-APP-000141
Group -
Scripting of Internet Explorer WebBrowser Control must be disallowed (Restricted Sites zone).
This policy setting controls whether a page may control embedded WebBrowser Control via script. Scripted code hosted on sites located in this zone is more likely to contain malicious code. If you e...Rule Medium Severity -
SRG-APP-000141
Group -
When uploading files to a server, the local directory path must be excluded (Restricted Sites zone).
This policy setting controls whether or not the local path information will be sent when uploading a file via a HTML form. If the local path information is sent, some information may be unintention...Rule Medium Severity -
SRG-APP-000516
Group -
Security Warning for unsafe files must be disallowed (Restricted Sites zone).
This policy setting controls whether or not the 'Open File - Security Warning' message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file ...Rule Medium Severity -
SRG-APP-000210
Group -
SRG-APP-000141
Group -
SRG-APP-000112
Group -
SRG-APP-000141
Group -
Status bar updates via script must be disallowed (Internet zone).
This policy setting allows you to manage whether script is allowed to update the status bar within the zone. A script running in the zone could cause false information to be displayed on the status...Rule Medium Severity -
SRG-APP-000516
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.