DTBI039 – Navigating windows and frames across different domains must be disallowed (Internet zone).
Details Frames that navigate across different domains are a security concern, because the user may think they are accessing pages...
- Home
- Security Hardening
- DISA STIG Microsoft Internet Explorer 9 V1R15
DISA STIG Microsoft Internet Explorer 9 V1R15
DTBI042 – Userdata persistence must be disallowed (Internet zone).
Details Userdata persistence must have level of protection based upon the site being accessed. This policy setting allows you to...DTBI044 – Clipboard operations via script must be disallowed (Internet zone).
Details A malicious script could use the clipboard in an undesirable manner, for example, if the user had recently copied...DTBI046 – Logon options must be configured to prompt (Internet zone).
Details Users could submit credentials to servers operated by malicious people who could then attempt to connect to legitimate servers...DTBI061 – Java Permissions must be configured with High Safety (Intranet zone).
Details Java applications could contain malicious code; sites located in this security zone are more likely to be hosted by...DTBI030 – Font downloads must be disallowed (Internet zone).
Details Download of fonts can sometimes contain malicious code. It is possible that a font could include malformed data that...DTBI031 – The Java Permissions must be disallowed (Internet zone).
Details Java applications could contain malicious code; sites located in this security zone are more likely to be hosted by...DTBI032 – Accessing data sources across domains must be disallowed (Internet zone).
Details The ability to access data zones across domains could cause the user to unknowingly access content hosted on an...DTBI036 – Functionality to drag and drop or copy and paste files must be disallowed (Internet zone).
Details Content hosted on sites located in the Internet zone are likely to contain malicious payloads and therefore this feature...DTBI038 – Launching programs and files in IFRAME must be disallowed (Internet zone).
Details This policy setting allows you to manage whether applications may be run and files may be downloaded from an...