31,003
edits
Security information: Difference between revisions
Jump to navigation
Jump to search
m
→File:art.png Features
Tag: 2017 source edit |
Tag: 2017 source edit |
||
| Line 56: | Line 56: | ||
* Production option to disable any technical information leakage like debug, error stacktrace, version informations (See [[Configuration_file|configuration file]]) <sup>[*6]</sup>. | * Production option to disable any technical information leakage like debug, error stacktrace, version informations (See [[Configuration_file|configuration file]]) <sup>[*6]</sup>. | ||
* Protection against SQL injection <sup>[*2]</sup>. | * Protection against SQL injection <sup>[*2]</sup>. | ||
* Protection against XSS injection (Cross Site Scripting) <sup>[*1]</sup>. Note that it is | * Protection against XSS injection (Cross Site Scripting) <sup>[*1]</sup>. | ||
* Protection against CSRF (Cross Site Request Forgery) <sup>[*5]</sup>. | |||
Note that it is also recommanded to protect your web server by disabled Apache option | |||
<source lang="ini"> | <source lang="ini"> | ||
AcceptPathInfo Off | AcceptPathInfo Off | ||
</source> | </source> | ||
'''Pages and files access''' | '''Pages and files access''' | ||