Extensions that are approved for use must be allowlisted if used.
An XCCDF Rule
Description
By default, all extensions are allowed. However, if all extensions are blocked by setting the "ExtensionInstallBlockList" policy to "*," users can only install extensions defined in this policy.
- ID
- SV-235755r961479_rule
- Version
- EDGE-00-000042
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Allow specific extensions to be installed" to "Enabled". A list of allowlisted extensions may then be specified.