TMA-SHAREPOINT-3.6

Ensure that SharePoint is configured with "Strict" browser file handling settings

보통레벨 1자동sharepoint

설명

SharePoint must prevent the execution of prohibited mobile code. Prints the number of web applications whose BrowserFileHandling is not Strict (expected 0). Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.

점검 방법

감사 방식: 셸 명령

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $bad = @(Get-SPWebApplication -ErrorAction Stop | Where-Object { "$($_.BrowserFileHandling)" -ne 'Strict' }); $bad.Count

예상 출력: 0

조치 방법

조치 방식: 가이드 또는 인프라 패치

Central Administration > Manage Web Applications > General Settings > Browser File Handling: Strict (or $wa = Get-SPWebApplication <url>; $wa.BrowserFileHandling = 'Strict'; $wa.Update()).

속성

운영 체제: 모두
태그: sharepointweb-applications
참고 자료: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.6 Ensure that SharePoint is configured with "Strict" browser file handling settings

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target sharepoint