I've searched far and wide and can't find a single setting that looks anything like controlling mobile code as it was a few years back. Even the STIGs have moved away from that language. I've read through the Windows and Edge STIGs and Baselines and found nothing that apparently maps to 800-53's SC-18. I couldn't find anything other than advice to implement the STIG on the Web. Those sites just said implement the STIG not which settings in the STIG actually implement mobile code control.

Which discreet settings are you configuring to control mobile code?