documentation_complete: true

title: 'Disable Popups'

description: "Chromium allows you to manage whether or not unwanted pop-up windows appear.\nTo disable pop-ups, set <tt>DefaultPopupsSetting</tt> to <tt>2</tt> \nin the Chromium policy file."

rationale: |-
    Pop-up windows should be disabled to prevent malicious websites from controlling
    pop-up windows or fooling users into clicking on the wrong window.

severity: unknown

identifiers:
    cce: ""

references:
    disa: ""
    nist: ""
    stigid: DTBC0004

ocil_clause: 'it is not disabled'

ocil: |-
    To verify that pop-ups are disabled, run the following command:
    <pre>$ grep DefaultPopupsSetting /etc/chromium/policies/managed/*.json</pre>
    The output should contain:
    <pre>"DefaultPopupsSetting": 2,</pre>
