Using the node Security it is possible to define parameters for the inspection of IP addresses so unwanted transmissions of URLs can be reconstructed. Use this properties when working in WebOffice 10.9 SP2 projects with WebOffice usermanagement. In the case of hijacking, an entry gets written into the log file.
Security configuration
Property |
Description |
Check Hijacking? |
Switch to check Client IP addresses (Yes) or to ignore them (No). |
Hijacking Exceptions |
List of IP addresses to be excluded from checking. Addresses are separated by semicolon ( ; ) , wildcards can be used (i.e. 255.255.1.*). |
XSS Parameter Exceptions |
List of parameter named to be excluded from xss attack checking. Parameter named are separated by semicolon ( ; ). The following values can be configured as exceptions: (a) parameters listed under <WebOffice Application>/pub/url-parameters.info (b) technical names of attributes |
Use login via XMLHttp? |
Defines the type of post used for signing in to WebOffice. Either a Standard HTTP Form Post (No, Default) or a XMLHTTP Request (Yes) is used. Use this option to suppress session information in URL-Line of the browser. Note: XMLHttp Forwarding is reported to crash some browsers. |
Security configuration