What's new

Anchor
Blacklist_optn Blacklist_optn

Blacklist domains option in Global Configuration

Administrators can now blacklist choose to blacklist a pre-defined list of private networks, hosts or subnets to avoid Server Side Request Forgeries (SSRF) through the using the Blacklist domains configuration option.  configuration option. This feature comes in handy when deploying your instance to any Cloud platform such as Amazon Web Services (AWS), Microsoft Azure, and so on.

By default, this option is disabled. If enabled, and if a request from any of these the blacklisted sites is received, users are prompted to contact the system administrator for further processing, or, an error message is displayed an error message is displayed. However, if users still need to access a blacklisted site, they must contact their system administrator to disable this option. Click the link named named listed (in the description beneath the option) to view the pre-defined list of the most commonly blacklisted sites domains in a pop-up window.

Image RemovedImage Added

Anchor
Enhanced_XSS_security Enhanced_XSS_security

Enhanced security against XSS vulnerabilities

This app version now provides enhanced security to handle any cross-site scripting from the macros.

Image Added