Skip to main content
CUI

Vulnerability V-251555

Back

V-251555

CAT II

Firefox must be configured to prevent JavaScript from raising or lowering windows.

Ships Affected
1
Total Findings
4
Open
0
Closed
4

Check Text

Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_flip" with a value of "true" and status of "locked", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: <key>Preferences</key> <dict> <key>dom.disable_window_flip</key> <dict> <key>Value</key> <true/> <key>Status</key> <string>locked</string> </dict> </dict> Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_flip": { "Value": true, "Status": "locked" } }

STIG Reference

STIG
Mozilla Firefox Security Technical Implementation Guide
Version
6
Release
7
Rule ID
SV-251555r1067556_rule

All Occurrences

This vulnerability appears on 1 ship(s)

Ship Hull # Source File Status Assigned To Scan Date Actions
USNS MONTFORD POINT T-ESD-1 MONT-SW-89134_Firefox_V6R6_20251217-201244.ckl
Unassigned 2026-03-04T15:25:41.899130 View in Context
USNS MONTFORD POINT T-ESD-1 MONT-SW-89108_Firefox_V6R6_20251217-203042.ckl
Unassigned 2026-03-04T15:25:15.868210 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Firefox_V6R6_20251023-141154.ckl
Unassigned 2026-01-14T12:57:27.870047 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Firefox_V6R6_20251023-142444.ckl
Unassigned 2026-01-14T12:57:25.596878 View in Context
CUI