Firefox must be configured to disable form fill assistance.

To protect privacy and sensitive data, Firefox provides the ability to configure the program so that data entered into forms is not saved. This mitigates the risk of a website gleaning private information from prefilled information.

Type "about:policies" in the browser window.

If "DisableFormHistory" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.

Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Form History Policy State: Enabled

macOS "plist" file: Add the following: <key>DisableFormHistory</key> <true/>

Linux "policies.json" file: Add the following in the policies section: "DisableFormHistory": true