TMA-CHROME-1.26

Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'

YüksekDüzey 1Otomatikchrome

Açıklama

Google Chrome can use a list of origins (URLs) or hostname patterns (such as "*.example.com") for which security restrictions on insecure origins will not apply and are prevented from being labeled as "Not Secure" in the omnibox. The recommended state for this setting is: Disabled (0) Rationale: Insecure contexts shall always be labeled as insecure. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin is missing or empty, otherwise the configured entries.

Nasıl denetlenir

Denetim yöntemi: Windows kayıt defteri

registry

$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }

Beklenen çıktı: absent

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Origins or hostname patterns for which restrictions on insecure origins should not apply = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin after reviewing them.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: chromebrowsercis-l1
Referans: CIS Google Chrome Benchmark v3.0.0 - 1.26 Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target chrome