TMA-ANDROID-3.3
Ensure 'Allow third-party cookies' is set to 'Disabled'
Description
A third-party cookie is sent by a domain that differs from the domain in the browser's address bar. The recommended state for this setting is: Disabled.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Follow the below steps to verify that Allow third-party cookies is Disabled: Chrome Icon > Menu Icon > Settings > Site settings > Verify that Allow third-party cookies displays Allowed, except third- party.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the below steps to Disabled the Allow third-party cookies option: Chrome Icon > Menu Icon > Settings > Site settings > Allow third-party cookies > Uncheck the Allow third-party cookies checkbox.
Properties
- Operating systems
- Any
- Tags
- androidchrome
- Reference
- CIS Google Android Benchmark v1.6.0 - 3.3 Ensure 'Allow third-party cookies' is set to 'Disabled'