Title

The IE form redirect parameter is not set correctly. (Cat II impact)

Discussion

This parameter warns the user that input from the form is being redirected to another web site. Since the form may contain sensitive data the user must be warned that the data is not being directed to the site the user was using. This enables the user to make a decision if the data on the form is appropriate for inclusion into the new web site.

Check Content

Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value WarnOnPostRedirect value is 1, this is not a finding.

Fix Text

Change the registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings to the value WarnOnPostRedirect is 1.

Additional Identifiers

Rule ID: SV-6291r1_rule

Vulnerability ID: V-6241

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.