Ensure Warn When Visiting A Fraudulent Website in Safari Is Enabled

MediumLevel 1Automatedmacos

Description

Apple uses the Google Safe Browsing API to check for fraudulent websites and report them to the user attempting to visit one.

How it is checked

Audit method: Shell command

shell

out=$(/usr/sbin/system_profiler SPConfigurationProfileDataType 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -E 'WarnAboutFraudulentWebsites' | /usr/bin/tr -d ' '

Expected output: WarnAboutFraudulentWebsites=1;

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.Safari WarnAboutFraudulentWebsites = <true/>.

Properties

Operating systems: macos-15
Tags: macosapplications
Reference: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 6.3.3 Ensure Warn When Visiting A Fraudulent Website in Safari Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target macos