Ensure 'Show full website address' is 'Enabled'

НизкийУровень 1Автоматическаяsafari

Описание

This setting controls how the URL is displayed. With it enabled, the full path will be shown. With it disabled, only the high-level domain will be displayed. Rationale: By displaying the full URL, the user is better informed as to where they are browsing on a given site and may even see sensitive parameters that are being passed via URL. Audit reads ShowFullURLInSmartSearchField from the com.apple.Safari preference domain of the account running the scan (the PDF checks the same token in com.apple.Safari.plist; manual check: Follow the below steps and verify that Show full website address is set to Enabled: 1. Click Safari. 2. Click Preferences. 3. Click Advanced. 4. Verify the Show full website address checkbox is checke). Safari is sandboxed, so the reading process needs Full Disk Access on macOS 10.14+. A missing key exits non-zero and is reported as FAIL even where the built-in default is compliant. Values forced by a configuration profile live in /Library/Managed Preferences and are not read here.

Как проверяется

Метод проверки: Команда оболочки

shell

out=$(defaults read com.apple.Safari ShowFullURLInSmartSearchField 2>/dev/null) || exit 1; printf '%s\n' "$out"

Ожидаемый вывод: 1

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Follow the below steps to set Show full website address to Enabled: 1. Click Safari. 2. Click Preferences. 3. Click Advanced. 4. Check Show full website address checkbox. Or deploy a configuration profile for com.apple.Safari setting ShowFullURLInSmartSearchField = true, or as the logged-in user run: defaults write com.apple.Safari ShowFullURLInSmartSearchField -bool true and restart Safari.

Свойства

Операционные системы: Любая
Теги: safaribrowsercis-l1
Источник: CIS macOS Safari Benchmark v2.0.0 - 10.1 Ensure 'Show full website address' is 'Enabled'

Проверить этот хост

Выполните команду на компьютере, аудит которого вам разрешён. Сканирование работает только на чтение.

shell

tmaegis scan --target safari