BaselineWatch
Desk

FFOX-00-000021 Firefox autoplay must be disabled.

DISA STIG library V6R9
All changes in this version
first version loaded CAT III

Maps to CM-7 via CCI-000381

Title

Firefox autoplay must be disabled.

Control

Type "about:policies" in the browser address bar. If "Permissions" is not displayed under Policy Name or the Policy Value is not "Autoplay" with a value of "Default" and "Block-audio-video", this is a finding.

Discussion

Autoplay allows the user to control whether videos can play automatically (without user consent) with audio content. The user must be able to select content that is run within the browser window.

Related controls

CCI-000381

Fix

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Permissions\Autoplay Policy Name: Default autoplay level Policy State: Enabled Policy Value: Block Audio and Video macOS "plist" file: Add the following: Permissions Autoplay block-audio-video Linux "policies.json" file: Add the following in the policies section: "Permissions": { "Autoplay": { "Default": "block-audio-video" } }