Firefox must be configured to disable form fill assistance.
An XCCDF Rule
Description
To protect privacy and sensitive data, Firefox provides the ability to configure the program so that data entered into forms is not saved. This mitigates the risk of a website gleaning private information from prefilled information.
- ID
- SV-251551r879587_rule
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox
Policy Name: Disable Form History
Policy State: Enabled