TMA-SAFARI-6.3

Ensure 'Block pop-up windows' is 'Enabled'

SrednjaNivo 2Automatskasafari

Opis

The Block pop-up windows feature is used to block pop-up windows which a website might open with or without any user interaction. Pop-ups can be used to open un-trusted malicious content. It is recommended that the Popup Blocker be enabled. Rationale: By enabling Block pop-up windows, pop-ups will be blocked which will reduce the likelihood of being redirected to a malicious site. Audit reads WebKitJavaScriptCanOpenWindowsAutomatically from the com.apple.Safari preference domain of the account running the scan (the PDF checks the same token in com.apple.Safari.plist; manual check: Follow the below steps and verify that Block pop-up windows is Enabled: 1. Click Safari. 2. Click Preferences. 3. Click Security. 4. Verify Block pop-up windows is checked). Safari is sandboxed, so the reading process needs Full Disk Access on macOS 10.14+. A missing key exits non-zero and is reported as FAIL even where the built-in default is compliant. Values forced by a configuration profile live in /Library/Managed Preferences and are not read here.

Kako se proverava

Metod provere: Komanda ljuske

shell

out=$(defaults read com.apple.Safari WebKitJavaScriptCanOpenWindowsAutomatically 2>/dev/null) || exit 1; printf '%s\n' "$out"

Očekivani izlaz: 0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Follow the below steps to set Block pop-up windows to Enabled: 1. Click Safari. 2. Click Preferences. 3. Click Security. 4. Check the Block pop-up windows checkbox Or deploy a configuration profile for com.apple.Safari setting WebKitJavaScriptCanOpenWindowsAutomatically = false, or as the logged-in user run: defaults write com.apple.Safari WebKitJavaScriptCanOpenWindowsAutomatically -bool false and restart Safari.

Svojstva

Operativni sistemi: Bilo koji
Oznake: safaribrowsercis-l2
Referenca: CIS macOS Safari Benchmark v2.0.0 - 6.3 Ensure 'Block pop-up windows' is 'Enabled'

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target safari --level 2