The URL protocol schemas file and javascript must be disabled

Part of DTBC0021 - Disable URL protocol schemas

Associated with IA controls: ECSC-1

Associated with: CCI-001588

SV-47058r1_rule The URL protocol schemas file and javascript must be disabled

Vulnerability discussion

"Disables the listed protocol schemes in Google Chrome. URLs using a scheme from this list will not load and can not be navigated to. If this policy is left not set or the list is empty all schemes will be accessible in Google Chrome." - Google Chrome Administrators Policy List

Check content

Fix text

Valid for Chrome Browser version 12 or later. Windows registry: Key Path: HKLM\Software\Policies\Google\Chrome\DisabledSchemes\ Value Name: 1 Value Type: String (REG_SZ) Value Data: file Key Path: HKLM\Software\Policies\Google\Chrome\DisabledSchemes\ Value Name: 2 Value Type: String (REG_SZ) Value Data: javascript Windows group policy: Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Disable URL protocol schemes Policy State: Enabled Policy Value 1: file Policy Value 2: javascript

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.