STIGQter: STIG Summary: Microsoft Edge Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

FriendlyURLs must be disabled.

DISA Rule

SV-266981r1169858_rule

Vulnerability Number

V-266981

Group Title

SRG-APP-000141

Rule Version

EDGE-00-000068

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Set the policy value for "Computer Configuration/Administrative Templates/Microsoft EdgeConfigure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users" to "enabled" and select "The plain URL without any extra information, such as the page´s title. This is the recommended option when this policy is configured. For more information, see the description."

Check Contents

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Configure the default paste format of URLs copied from Microsoft Edge and determine if additional formats will be available to users" must be set to "enabled" with the option value set to "The plain URL without any extra information, such as the page´s title. This is the recommended option when this policy is configured. For more information, see the description.".

Use the Windows Registry Editor to navigate to the following key:
HKLM\SOFTWARE\Policies\Microsoft\Edge

If the value for "ConfigureFriendlyURLFormat" is not set to "REG_DWORD = 1", this is a finding.

Vulnerability Number

V-266981

Documentable

False

Rule Version

EDGE-00-000068

Severity Override Guidance

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Configure the default paste format of URLs copied from Microsoft Edge and determine if additional formats will be available to users" must be set to "enabled" with the option value set to "The plain URL without any extra information, such as the page´s title. This is the recommended option when this policy is configured. For more information, see the description.".

Use the Windows Registry Editor to navigate to the following key:
HKLM\SOFTWARE\Policies\Microsoft\Edge

If the value for "ConfigureFriendlyURLFormat" is not set to "REG_DWORD = 1", this is a finding.

Check Content Reference

M

Target Key

5280