Skip to content

Firefox must be configured to disable form fill assistance.

An XCCDF Rule

Description

The update check may be disabled in an administrative policy by setting the DisableFormHistory key under policies to true.

Rationale

To protect privacy and sensitive data, Firefox provides the ability to configure the program so that data entered into forms is not saved. This mitigates the risk of a website gleaning private information from prefilled information.

ID
xccdf_org.ssgproject.content_rule_firefox_policy-disable_form_history
Severity
Medium
References
Updated



Remediation - Shell Script


firefox_cfg="policies.json"
# Default to /etc/firefox/policies to use for remediations.
firefox_dirs="/etc/firefox/policies"
permissions=644