Security information: Difference between revisions

m
Tag: 2017 source edit
Tag: 2017 source edit
Line 68: Line 68:
*Protection against SQL injection. Protected by an Internal WAF, and unit test to check database good practice for escapement. <sup>[*2]</sup>.
*Protection against SQL injection. Protected by an Internal WAF, and unit test to check database good practice for escapement. <sup>[*2]</sup>.
*Protection against XSS injection (Cross Site Scripting). Protected by an internal WAF and web page headers. <sup>[*1]</sup>.
*Protection against XSS injection (Cross Site Scripting). Protected by an internal WAF and web page headers. <sup>[*1]</sup>.
*Protection against CSRF (Cross Site Request Forgery). Protected by an internal WAS and a token system. <sup>[*5]</sup>.
*Protection against CSRF (Cross Site Request Forgery). Protected by an internal WAF and a token system. <sup>[*5]</sup>.


Note that it is also recommended to protect your web server by disabled Apache option
Note that it is also recommended to protect your web server by disabled Apache option