Page 1 of 1
Configure security options with options.xml file?
Posted: Fri Jun 21, 2024 4:09 pm
by Johann
Hello,
In Web Author 26.1 version, I have to change some security parameters in Administration page especially CSP:
image.png
Is it possible to change these options directly in options.xml file or somewhere else in order not to have to do it "by hand"?
Thanks for your help,
Johann
Re: Configure security options with options.xml file?
Posted: Fri Jun 21, 2024 5:52 pm
by cosminef
Hello,
Each CSP entry in the Web Author interface has a corresponding counterpart in the
options.xml file
The order of these entries presented in
options.xml corresponds to the order of CSP options in the Web Author interface (as shown in your screenshot):
Code: Select all
<entry>
<String>csp.default.src</String>
<String-array>
<String>test1</String>
</String-array>
</entry>
<entry>
<String>csp.script.src</String>
<String-array>
<String>test2</String>
</String-array>
</entry>
<entry>
<String>csp.style.src</String>
<String-array>
<String>test3</String>
</String-array>
</entry>
<entry>
<String>csp.img.src</String>
<String-array>
<String>test4</String>
</String-array>
</entry>
<entry>
<String>csp.connect.src</String>
<String-array>
<String>test5</String>
</String-array>
</entry>
<entry>
<String>csp.font.src</String>
<String-array>
<String>test6</String>
</String-array>
</entry>
<entry>
<String>csp.object.src</String>
<String-array>
<String>test7</String>
</String-array>
</entry>
<entry>
<String>csp.media.src</String>
<String-array>
<String>test8</String>
</String-array>
</entry>
<entry>
<String>csp.frame.src</String>
<String-array>
<String>test9</String>
</String-array>
</entry>
<entry>
<String>csp.sandbox</String>
<String-array>
<String>test10</String>
</String-array>
</entry>
Each line added in the dialog boxes in the Web Author interface corresponds to a <String> element in the
options.xml file
Best,
Cosmin
Re: Configure security options with options.xml file?
Posted: Mon Jul 01, 2024 5:18 pm
by Johann
Thank you Cosmin!
Regards,
Johann
Re: Configure security options with options.xml file?
Posted: Tue Aug 27, 2024 7:13 pm
by Johann
Hello Cosmin,
Is there a particular rule about the display of the CSP section inside Administration / Security page?
Because I don't find this section anymore.
Is this because I now use Oxygen Web Author 26.1.0.1 or there is an option that I missed in order to display this section?
Thank you,
Regards,
Johann
Re: Configure security options with options.xml file?
Posted: Wed Aug 28, 2024 11:11 am
by cosminef
Hello Johann,
The CSP section is not available in the released versions. You may have used a Beta version of Web Author from the Oxygen Beta Program page, under Nightly Builds [1].
[1]
https://www.oxygenxml.com/oxygen_beta_program.html
Best,
Cosmin
Re: Configure security options with options.xml file?
Posted: Wed Aug 28, 2024 11:18 am
by Johann
Hello Cosmin,
Ok, you are right. It means that I made a mistake in my initial post (I was talking about 26.1 version but indeed it was a 27 beta version)
Does it mean that the options you suggest are not available in released versions? Or it is just the display of the options that is not available in released versions?
Code: Select all
<entry>
<String>csp.default.src</String>
<String-array>
<String>test1</String>
</String-array>
</entry>
<entry>
<String>csp.script.src</String>
<String-array>
<String>test2</String>
</String-array>
</entry>
<entry>
<String>csp.style.src</String>
<String-array>
<String>test3</String>
</String-array>
</entry>
<entry>
<String>csp.img.src</String>
<String-array>
<String>test4</String>
</String-array>
</entry>
<entry>
<String>csp.connect.src</String>
<String-array>
<String>test5</String>
</String-array>
</entry>
<entry>
<String>csp.font.src</String>
<String-array>
<String>test6</String>
</String-array>
</entry>
<entry>
<String>csp.object.src</String>
<String-array>
<String>test7</String>
</String-array>
</entry>
<entry>
<String>csp.media.src</String>
<String-array>
<String>test8</String>
</String-array>
</entry>
<entry>
<String>csp.frame.src</String>
<String-array>
<String>test9</String>
</String-array>
</entry>
<entry>
<String>csp.sandbox</String>
<String-array>
<String>test10</String>
</String-array>
</entry>
Thank you,
Johann
Re: Configure security options with options.xml file?
Posted: Wed Aug 28, 2024 11:34 am
by cosminef
Hello,
Indeed, the entries we mentioned from options.xml (related to CSP) are no longer valid in the released versions.
Best,
Cosmin
Re: Configure security options with options.xml file?
Posted: Wed Aug 28, 2024 12:27 pm
by Johann
Ok that's clear for me now!
Regards,
Johann