Microsoft Internet Explorer 11 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000039
<GroupDescription></GroupDescription>Group -
Accessing data sources across domains must be disallowed (Internet zone).
<VulnDiscussion>The ability to access data zones across domains could cause the user to unknowingly access content hosted on an unauthorized ...Rule Medium Severity -
SRG-APP-000141
<GroupDescription></GroupDescription>Group -
Functionality to drag and drop or copy and paste files must be disallowed (Internet zone).
<VulnDiscussion>Content hosted on sites located in the Internet zone are likely to contain malicious payloads and therefore this feature shou...Rule Medium Severity -
SRG-APP-000141
<GroupDescription></GroupDescription>Group -
Launching programs and files in IFRAME must be disallowed (Internet zone).
<VulnDiscussion>This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference...Rule Medium Severity -
SRG-APP-000039
<GroupDescription></GroupDescription>Group -
Navigating windows and frames across different domains must be disallowed (Internet zone).
<VulnDiscussion>Frames that navigate across different domains are a security concern, because the user may think they are accessing pages on ...Rule Medium Severity -
SRG-APP-000231
<GroupDescription></GroupDescription>Group -
Userdata persistence must be disallowed (Internet zone).
<VulnDiscussion>Userdata persistence must have a level of protection based upon the site being accessed. It is possible for sites hosting mal...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.