Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

PropertyDescription
frontendxssfilter_class_parameters


Panel
borderColor#0081C0
titleColor#0081C0

This setting was introduced in XperienCentral version R29.3.

Specifies the parameter(s) that cause a request to be blocked if they do not conform to a valid Java class name. See also XperienCentral XSS Filters (login required).

frontendxssfilter_integer_parameters


Panel
borderColor#0081C0
titleColor#0081C0

This setting was introduced in XperienCentral version R29.3.

Specifies the parameter(s) that cause a request to be blocked if they do not contain a valid integer. See also XperienCentral XSS Filters (login required).

frontendxssfilter_uuid_parameters


Panel
borderColor#0081C0
titleColor#0081C0

This setting was introduced in XperienCentral version R29.3.

Specifies the parameter(s) that cause a request to be blocked if they do not contain a valid UUID. See also XperienCentral XSS Filters (login required).

ignore_backend_cookiesSpecifies whether to ignore cookies relayed by a front-end proxy to the backend server.
max_charSpecifies the code of the highest ASCII character that XperienCentral will output. The default is "127" (all standard ASCII characters).
max_includes_depthSpecifies the maximum number of includes allowed in a config.
max_includes_per_requestSpecifies the maximum number of includes that are allowed during a single request.
max_recursion_depthSpecifies the maximum depth of includes recursion.
ntlm_auth_domain_controllerSpecifies the IP address of the NTLM authentication server.
ntlm_auth_enabledEnables/disables NTLM authorization.
ntlm_auth_ignore_hostsSpecifies the names of the hosts from which requests will be ignored. Separate multiple host names using a comma (,).
ntlm_auth_ignore_user_agentsSpecifies the user agents that will be ignored.
package_image_urlSpecifies the location where XperienCentral menu-related images are stored.
presentation_jsps_urlThe relative URL of the XperienCentral design config JSPs. In XperienCentral versions R43 and higher, you must add the location /WEB-INF/project/nl.gx.product.wmpbasepresentation for all projects.
replicate_uploads_on_readonlySpecifies whether to replicate uploaded files on read-only servers in a cluster.
static_files_locationSpecifies the directory where static files are stored (relative to the XperienCentral installation).
user_profiles_export_maxSpecifies the maximum number of user profiles that can be exported in one export file.
xssfilter_get_ignore_parameters


Panel
borderColor#0081C0
titleColor#0081C0

This setting was introduced in XperienCentral version R29.3.

Specifies the parameters that are checked for forbidden characters in GET requests.  Add the parameters to check in a comma-separated list. The forbidden characters are <, >, ' and ". The list of forbidden characters cannot be extended. See also XperienCentral XSS Filters (login required).

xssfilter_post_check_urls_for_parameters


Panel
borderColor#0081C0
titleColor#0081C0

This setting was introduced in XperienCentral version R29.3.

Specifies the URL expressions to block. See also XperienCentral XSS Filters (login required).

xssfilter_post_ignore_urls_for_parameters


Panel
borderColor#0081C0
titleColor#0081C0

This setting was introduced in XperienCentral version R29.3.

Specifies the URLs that are ignored in POST requests. The default ignored URLs (for Layout editing and Persona editing) are:

  • <context>/wcb/nl.gx.product.wmpgui/panel.html?panelIdentifier=wmppersona.personaManagementPanel
  • <context>/wcb/nl.gx.product.wmpgui/panel.html?panelIdentifier=wmplayout.layoutManagementPanel

See also XperienCentral XSS Filters (login required).

xssfilter_url_check_ignore


Panel
borderColor#0081C0
titleColor#0081C0

This setting was introduced in XperienCentral version R29.3.

Specifies the trusted URLs. This filter blocks a request if the request URI (the URL path) contains the characters < or > or a UTF-8 encoded version of these characters The list of forbidden characters cannot be extended. Add trusted URLs using a regular expression. See also XperienCentral XSS Filters (login required).

...