documentation_complete: true

title: 'Enable Firefox Pop-up Blocker'

description: |-
    The pop-up blocker can be enabled by setting
    <tt>dom.disable_window_open_feature.status</tt> to <tt>true</tt>.

rationale: |-
    Popup windows may be used to launch an attack within a new browser window
    with altered settings.

severity: medium

identifiers:
    cce: ""

references:
    disa: ""
    nist: ECSC-1
    stigid: DTBF180

ocil_clause: 'it is not enabled'

ocil: |-
    To verify that pop-up blocker is enabled,
    run the following command:
    <pre>$ grep 'dom.disable_window_open_feature.status' <i>FIREFOX_INSTALL_DIR</i>/*.cfg</pre>
    The output should return:
    <pre>lockPref("dom.disable_window_open_feature.status", "true");</pre>
