id: os_safari_JavaScript_disable
title: Prevent JavaScript
discussion: |
  The iOS device _MUST_ be configured to prevent JavaScript support in Safari to prevent malicious code execution on the device.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXXX-X
      ios_26:
        - CCE-95680-5
      ios_18:
        - CCE-94546-9
      ios_17:
        - CCE-93494-3
  bsi:
    indigo:
      ios_26:
        - ANNEX K
      ios_18:
        - ANNEX K
      ios_17:
        - ANNEX K
platforms:
  iOS:
    '27.0': {}
    '26.0':
      supervised: false
      benchmarks:
        - name: indigo_high
    '18.0':
      supervised: false
      benchmarks:
        - name: indigo_high
    '17.0':
      supervised: false
      benchmarks:
        - name: indigo_high
    introduced: '4.0'
mobileconfig_info:
  - PayloadType: com.apple.applicationaccess
    PayloadContent:
      - safariAllowJavaScript: false
