STIGQter: STIG Summary: Mozilla Firefox Security Technical Implementation Guide Version: 6 Release: 8 Benchmark Date: 01 Jul 2026:

The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets.

DISA Rule

SV-251573r960963_rule

Vulnerability Number

V-251573

Group Title

SRG-APP-000141

Rule Version

FFOX-00-000029

Severity

CAT II

CCI(s)

CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

Fix Recommendation

Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox
Policy Name: Customize Firefox Home
Policy State: Enabled
Policy Value: Uncheck "Search"
Policy Value: Uncheck "Top Sites"
Policy Value: Uncheck "Sponsored Top Sites"
Policy Value: Uncheck "Recommended by Pocket"
Policy Value: Uncheck "Sponsored Pocket Stories"
Policy Value: Uncheck "Download History"
Policy Value: Uncheck "Snippets"
Policy Value: Check "Do not allow settings to be changed"

macOS "plist" file:
Add the following:
<key>FirefoxHome</key>
<dict>
<key>Search</key>
<false/>
<key>TopSites</key>
<false/>
<key>SponsoredTopSites</key>
<false/>
<key>Pocket</key>
<false/>
<key>SponsoredPocket</key>
<false/>
<key>Highlights</key>
<false/>
<key>Snippets</key>
<false/>
<key>Locked</key>
<true/>
</dict>

Linux "policies.json" file:
Add the following in the policies section:
"FirefoxHome": {
"Search": false,
"TopSites": false,
"SponsoredTopSites": false,
"Pocket": false,
"SponsoredPocket": false,
"Highlights": false,
"Snippets": false,
"locked": true
}

Check Contents

Type "about:policies" in the browser address bar.

If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Search" with a value of "false", this is a finding.
If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "TopSites" with a value of "false", this is a finding.
If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "SponsoredTopSites" with a value of "false", this is a finding.
If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Pocket" with a value of "false", this is a finding.
If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "SponsoredPocket" with a value of "false", this is a finding.
If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Highlights" with a value of "false", this is a finding.
If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Snippets" with a value of "false", this is a finding.
If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Locked" with a value of "true", this is a finding.

Vulnerability Number

V-251573

Documentable

False

Rule Version

FFOX-00-000029

Severity Override Guidance

Check Content Reference

Target Key

5446