documentation_complete: true

title: 'Default Firefox Home Page Configured'

description: |-
    The default home page is set to a vendor's defined website or
    Firefox's own website. This can be changed to an organizationally defined website
    or <tt>about:blank</tt>. To set the default home page, set
    <tt>browser.startup.homepage</tt> to <tt><sub idref="var_default_home_page" /></tt>.

rationale: "The browser home page parameter specifies the web page that is to be\ndisplayed when the browser is started explicitly and when product-specific\nbuttons or key sequences for the home page are accessed. This helps to\nmitigate the possibility of automatic inadvertent execution of scripts \nadded to a previously safe site."

severity: medium

identifiers:
    cce: ""

references:
    disa: ""
    nist: ECSC-1
    stigid: DTBF017

ocil_clause: 'it is not configured'

ocil: |-
    To verify that default home page is set,
    run the following command:
    <pre>$ grep 'browser.startup.homepage' <i>FIREFOX_INSTALL_DIR</i>/*.cfg</pre>
    The output should return:
    <pre>lockPref("browser.startup.homepage", "<sub idref="var_default_home_page" />");</pre>
