Configure security options with options.xml file?

[Johann]

Hello,

In Web Author 26.1 version, I have to change some security parameters in Administration page especially CSP:

image.png

Is it possible to change these options directly in options.xml file or somewhere else in order not to have to do it "by hand"?

Thanks for your help,

Johann

[cosminef]

Hello,

Each CSP entry in the Web Author interface has a corresponding counterpart in the options.xml file
The order of these entries presented in options.xml corresponds to the order of CSP options in the Web Author interface (as shown in your screenshot):

Code: Select all

<entry>
	<String>csp.default.src</String>
	<String-array>
		<String>test1</String>
	</String-array>
</entry>

<entry>
	<String>csp.script.src</String>
	<String-array>
		<String>test2</String>
	</String-array>
</entry>

<entry>
	<String>csp.style.src</String>
	<String-array>
		<String>test3</String>
	</String-array>
</entry>

<entry>
	<String>csp.img.src</String>
	<String-array>
		<String>test4</String>
	</String-array>
</entry>

<entry>
	<String>csp.connect.src</String>
	<String-array>
		<String>test5</String>
	</String-array>
</entry>

<entry>
	<String>csp.font.src</String>
	<String-array>
		<String>test6</String>
	</String-array>
</entry>

<entry>
	<String>csp.object.src</String>
	<String-array>
		<String>test7</String>
	</String-array>
</entry>

<entry>
	<String>csp.media.src</String>
	<String-array>
		<String>test8</String>
	</String-array>
</entry>

<entry>
	<String>csp.frame.src</String>
	<String-array>
		<String>test9</String>
	</String-array>
</entry>

<entry>
	<String>csp.sandbox</String>
	<String-array>
		<String>test10</String>
	</String-array>
</entry>

Each line added in the dialog boxes in the Web Author interface corresponds to a <String> element in the options.xml file

Best,
Cosmin

[Johann]

Thank you Cosmin!

Regards,

Johann

[Johann]

Hello Cosmin,

Is there a particular rule about the display of the CSP section inside Administration / Security page?

Because I don't find this section anymore.

Is this because I now use Oxygen Web Author 26.1.0.1 or there is an option that I missed in order to display this section?

Thank you,

Regards,

Johann

[cosminef]

Hello Johann,

The CSP section is not available in the released versions. You may have used a Beta version of Web Author from the Oxygen Beta Program page, under Nightly Builds [1].

[1] https://www.oxygenxml.com/oxygen_beta_program.html

Best,
Cosmin

[Johann]

Hello Cosmin,

Ok, you are right. It means that I made a mistake in my initial post (I was talking about 26.1 version but indeed it was a 27 beta version)

Does it mean that the options you suggest are not available in released versions? Or it is just the display of the options that is not available in released versions?

Code: Select all

<entry>
	<String>csp.default.src</String>
	<String-array>
		<String>test1</String>
	</String-array>
</entry>

<entry>
	<String>csp.script.src</String>
	<String-array>
		<String>test2</String>
	</String-array>
</entry>

<entry>
	<String>csp.style.src</String>
	<String-array>
		<String>test3</String>
	</String-array>
</entry>

<entry>
	<String>csp.img.src</String>
	<String-array>
		<String>test4</String>
	</String-array>
</entry>

<entry>
	<String>csp.connect.src</String>
	<String-array>
		<String>test5</String>
	</String-array>
</entry>

<entry>
	<String>csp.font.src</String>
	<String-array>
		<String>test6</String>
	</String-array>
</entry>

<entry>
	<String>csp.object.src</String>
	<String-array>
		<String>test7</String>
	</String-array>
</entry>

<entry>
	<String>csp.media.src</String>
	<String-array>
		<String>test8</String>
	</String-array>
</entry>

<entry>
	<String>csp.frame.src</String>
	<String-array>
		<String>test9</String>
	</String-array>
</entry>

<entry>
	<String>csp.sandbox</String>
	<String-array>
		<String>test10</String>
	</String-array>
</entry>

Thank you,

Johann

[cosminef]

Hello,

Indeed, the entries we mentioned from options.xml (related to CSP) are no longer valid in the released versions.

Best,
Cosmin

[Johann]

Ok that's clear for me now!

Regards,

Johann