Details

This setting controls how the URL is displayed. With it enabled, the full path will be shown. With it disabled, only the high-level domain will be displayed.

Rationale:

By displaying the full URL, the user is better informed as to where they are browsing on a given site and may even see sensitive parameters that are being passed via URL.

Solution

Follow the below steps to set Show full website address to Enabled:

1. Click Safari.
2. Click Preferences.
3. Click Advanced.
4. Check Show full website address checkbox.

To configure the plist follow the below steps:

1. Open the com.apple.Safari.plist.
2. Find the token ShowFullURLInSmartSearchField
3. Ensure this token is immediately followed by

Default Value:
Disabled. (Shortens URL)

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1822

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CSCv6|7

Source

• Tenable.com/audits