Audit Pop-up Windows

LowLevel 1Manual reviewmacos

Description

Browser pop-up windows have long been one of the most annoying delivery mechanisms of unwanted web content. The content can be unwanted content, including Not Safe For Work, or malicious content relying on a user interacting with the pop-up. Safari has a built-in capability to disable pop-ups that should be enabled.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

GUI: Safari > Safari from the menu bar > Settings > Websites > Pop-up Windows > Verify the websites listed in Allow pop-up windows on the website below:. are allowed according to your organization's requirements Verify that When visiting other websites is set to Block and Notify or Block.

How it is fixed

Fix method: Guidance or infrastructure patch

GUI: Safari > Safari from the menu bar > Settings > Websites > Pop-up Windows > Set all websites to Block and Notify or Block, listed in Allow pop-up windows on the website below:, or select Remove to remove a website > Set that When visiting other websites is set to Block and Notify or Block.

Properties

Operating systems: macos-15
Tags: macosapplications
Reference: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 6.3.9 Audit Pop-up Windows