Opening behavior for Email forms containing code or scripts must be controlled.
An XCCDF Rule
Description
InfoPath notifies and prompts users before opening InfoPath email forms that contain code or script. If this restriction is relaxed, InfoPath will open email forms that contain code or script without prompting users, which could allow malicious code to run on the users' computers.
| Property | Value |
|---|---|
| Responsibility | System Administrator |
- ID
- SV-53362r1_rule
- Version
- DTOO167
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Set the policy value for User Configuration -> Administrative Templates -> Microsoft InfoPath 2013 -> InfoPath e-mail forms "Control behavior when opening InfoPath e-mail forms containing code or script" to "Enabled (Prompt before running)".