31,003
edits
Security information: Difference between revisions
m
no edit summary
mNo edit summary Tags: Visual edit Mobile edit Mobile web edit Advanced mobile edit |
mNo edit summary Tags: Visual edit Mobile edit Mobile web edit Advanced mobile edit |
||
| Line 80: | Line 80: | ||
*WAF: Protection against SQL injection. Protected by an Internal WAF, and unit test to check database good practice for escapement. <sup>[*2]</sup>. | *WAF: Protection against SQL injection. Protected by an Internal WAF, and unit test to check database good practice for escapement. <sup>[*2]</sup>. | ||
*WAF: Protection against XSS injection (Cross Site Scripting). Protected by an internal WAF and web page headers. <sup>[*1]</sup>. | *WAF: Protection against XSS injection (Cross Site Scripting). Protected by an internal WAF and web page headers. <sup>[*1]</sup>. | ||
*Protection against SSRF. All access to an URL uses the getURLContent() method into core/lib/geturl.lib.php that | *Protection against SSRF. All access to an URL uses the getURLContent() method into core/lib/geturl.lib.php that brings this protection. | ||
*Protection against CSRF (Cross Site Request Forgery). Protected by an internal WAF and a token system (with several level of renewal policies, by session or by page). <sup>[*5]</sup>. | *Protection against CSRF (Cross Site Request Forgery). Protected by an internal WAF and a token system (with several level of renewal policies, by session or by page). <sup>[*5]</sup>. | ||