Ensure that SharePoint is configured with "Strict" browser file handling settings

中レベル 1自動sharepoint

説明

SharePoint must prevent the execution of prohibited mobile code. Prints the number of web applications whose BrowserFileHandling is not Strict (expected 0). Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.

チェック方法

監査方法: シェルコマンド

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $bad = @(Get-SPWebApplication -ErrorAction Stop | Where-Object { "$($_.BrowserFileHandling)" -ne 'Strict' }); $bad.Count

期待される出力: 0

修正方法

修正方法: ガイダンスまたは IaC パッチ

Central Administration > Manage Web Applications > General Settings > Browser File Handling: Strict (or $wa = Get-SPWebApplication <url>; $wa.BrowserFileHandling = 'Strict'; $wa.Update()).

プロパティ

オペレーティングシステム: すべて
タグ: sharepointweb-applications
参照: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.6 Ensure that SharePoint is configured with "Strict" browser file handling settings

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target sharepoint