31,003
edits
Security information: Difference between revisions
m
→File:art.png Features
mNo edit summary Tag: 2017 source edit |
Tag: 2017 source edit |
||
| Line 66: | Line 66: | ||
*Works with PHP safe_mode on or off (on recommended) <sup>[*3]</sup>. | *Works with PHP safe_mode on or off (on recommended) <sup>[*3]</sup>. | ||
*Production option to disable any technical information leakage like debug, error stacktrace, version informations (See [[Configuration_file|configuration file]]) <sup>[*6]</sup>. | *Production option to disable any technical information leakage like debug, error stacktrace, version informations (See [[Configuration_file|configuration file]]) <sup>[*6]</sup>. | ||
*Protection against SQL injection <sup>[*2]</sup>. | *Protection against SQL injection. Protected by an Internal WAF, and unit test to check database good practice for escapement. <sup>[*2]</sup>. | ||
*Protection against XSS injection (Cross Site Scripting) <sup>[*1]</sup>. | *Protection against XSS injection (Cross Site Scripting). Protected by an internal WAF and web page headers. <sup>[*1]</sup>. | ||
*Protection against CSRF (Cross Site Request Forgery) <sup>[*5]</sup>. | *Protection against CSRF (Cross Site Request Forgery). Protected by an internal WAS and a token system. <sup>[*5]</sup>. | ||
Note that it is also | Note that it is also recommended to protect your web server by disabled Apache option | ||
<syntaxHighlight lang="ini"> | <syntaxHighlight lang="ini"> | ||
AcceptPathInfo Off | AcceptPathInfo Off | ||