Details

The display-capture permissions-policy gates access to getDisplayMedia()as per this spec:https://www.w3.org/TR/screen-capture/#feature-policy-integrationHowever if this policy is Disabled this requirement is not enforcedand getDisplayMedia() is allowed from contexts that would otherwise beforbidden. This Enterprise policy is temporary; it’s intended to beremoved after Microsoft Edge version 100.It is intended to unblock Enterprise users whose application is non-spec compliantbut needs time to be fixed.

If you enable or don’t configure this policy sites can only call getDisplayMedia() fromcontexts which are allowlisted by the display-capture permissions-policy.

If you disable this policy sites can call getDisplayMedia() even from contextswhich are not allowlisted by the display-capture permissions policy.

Note that other restrictions may still apply.

Solution

Policy Path: Microsoft Edge
Policy Setting Name: Specifies whether the display-capture permissions-policy is checked or skipped

Supportive Information

The following resource is also helpful.

• https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-microsoft-edge-v96/ba-p/2997665

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.

Source

• Tenable.com/audits