| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-251555 | CAT II | MONT-WS-92040 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to prevent JavaScript f... | - | |||
Check TextType "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_flip" with a value of "true" and status of "locked", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>dom.disable_window_flip</key> <dict> <key>Value</key> <true/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } Finding DetailsEvaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F867D7F319A1124DB9134388A49E4C3A4649CB0 ~~~~~ 'Preferences' is Enabled: dom.disable_window_flip Value: True Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ
Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Firefox_V6R6_20251023-142444.ckl
Scan Date: 2026-01-14T12:57:25.596878
Technology Area: Windows Operating System
|
||||||||
| V-251555 | CAT II | MONT-WS-92010 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to prevent JavaScript f... | - | |||
Check TextType "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_flip" with a value of "true" and status of "locked", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>dom.disable_window_flip</key> <dict> <key>Value</key> <true/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } Finding DetailsEvaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F867D7F319A1124DB9134388A49E4C3A4649CB0 ~~~~~ 'Preferences' is Enabled: dom.disable_window_flip Value: True Status: locked Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } } Type: REG_MULTI_SZ
Source: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Firefox_V6R6_20251023-141154.ckl
Scan Date: 2026-01-14T12:57:27.870047
Technology Area: Windows Operating System
|
||||||||
| V-251555 | CAT II | MONT-SW-89108 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to prevent JavaScript f... | - | |||
Check TextType "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_flip" with a value of "true" and status of "locked", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>dom.disable_window_flip</key> <dict> <key>Value</key> <true/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } Finding DetailsEvaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ
Source: MONT-SW-89108_Firefox_V6R6_20251217-203042.ckl
Scan Date: 2026-03-04T15:25:15.868210
Technology Area: Windows Operating System
|
||||||||
| V-251555 | CAT II | MONT-SW-89134 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to prevent JavaScript f... | - | |||
Check TextType "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_flip" with a value of "true" and status of "locked", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>dom.disable_window_flip</key> <dict> <key>Value</key> <true/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } Finding DetailsEvaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37E00BCE4884B93709738FC53EBBE5D0402A7F99 ~~~~~ 'Preferences' is Enabled but not correct: Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox Name: Preferences Value: <enabled/> <data id="JSON" value=' { "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event_contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }'/> Type: REG_MULTI_SZ
Source: MONT-SW-89134_Firefox_V6R6_20251217-201244.ckl
Scan Date: 2026-03-04T15:25:41.899130
Technology Area: Windows Operating System
|
||||||||