TMA-CHROME-1.26
Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'
Mô tả
Google Chrome can use a list of origins (URLs) or hostname patterns (such as "*.example.com") for which security restrictions on insecure origins will not apply and are prevented from being labeled as "Not Secure" in the omnibox. The recommended state for this setting is: Disabled (0) Rationale: Insecure contexts shall always be labeled as insecure. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin is missing or empty, otherwise the configured entries.
Cách kiểm tra
Phương pháp kiểm tra: Windows Registry
$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }- Đầu ra mong đợi
absent
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Origins or hostname patterns for which restrictions on insecure origins should not apply = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin after reviewing them.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- chromebrowsercis-l1
- Tham chiếu
- CIS Google Chrome Benchmark v3.0.0 - 1.26 Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'
Kiểm tra máy này
Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.
tmaegis scan --target chrome