Details
This policy setting allows you to manage whether scripts can perform a clipboard
operation (for example, cut, copy, and paste) in the security zone. The recommended state
for this setting is- Enabled-Disable.
*Rationale*
A malicious script could use the clipboard in an undesirable manner, for example, if the
user had recently copied confidential information to the clipboard while editing a
document a malicious script could harvest that information. It might be possible to exploit
other vulnerabilities in order to send the harvested data to the attacker.
Solution
To establish the recommended configuration via Group Policy, set the following UI path to
Enabled.
Computer ConfigurationAdministrative TemplatesWindows ComponentsInternet
ExplorerInternet Control PanelSecurity PageInternet ZoneAllow cut, copy or paste
operations from the clipboard via scriptThen set the Allow paste operations via script option to Disable.
Impact-If you enable this policy setting, a script can perform a clipboard operation. If you select
Prompt in the drop-down box, users are queried as to whether to perform clipboard
operations. If you disable this policy setting, a script cannot perform a clipboard operation.
If you do not configure this policy setting, a script cannot perform a clipboard operation.
Default Value-Enabled
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.