31,003
edits
m (→Global Options) Tag: 2017 source edit |
Tag: 2017 source edit |
||
| Line 223: | Line 223: | ||
*MAIN_SECURITY_ANTI_SSRF_SERVER_IP ► Can set a complete list of IPs of server. | *MAIN_SECURITY_ANTI_SSRF_SERVER_IP ► Can set a complete list of IPs of server. | ||
*MAIN_SECURITY_CSRF_WITH_TOKEN ► Activate a second anti-CSRF protection on POST (a POST from another web site can't be done). Note there is already a default protection using test on referrer. This second protection uses TOKEN on forms and is more powerful. ► (v5.0+) | *MAIN_SECURITY_CSRF_WITH_TOKEN ► Activate a second anti-CSRF protection on POST (so a POST from another web site can't be done). Note there is already a default protection using test on referrer. This second protection uses TOKEN on forms and is more powerful. ► (v5.0+) | ||
*MAIN_MODULES_FOR_EXTERNAL ► Limit available modules for external users. By default value is '<code>facture,commande,contact,propal,projet,contrat,societe,ficheinter,expedition,agenda</code>' | *MAIN_MODULES_FOR_EXTERNAL ► Limit available modules for external users. By default value is '<code>facture,commande,contact,propal,projet,contrat,societe,ficheinter,expedition,agenda</code>' | ||