留言板

URL method whitelisting

Ramchand Gururajan,修改在7 年前。

URL method whitelisting

Junior Member 帖子: 33 加入日期: 16-4-5 最近的帖子
Hi All,
We have security recommendation to set by our security team who have asked to blacklist all the urls & methods(POST/GET/PUT/HEAD/DELETE/OPTION) via webserver & allow only those minimal url / methods which are required for application to work fine.

It would be great if any body has done the same or would share the set of minimal urls for whitelisting.

regards,
Ramchand.
thumbnail
Tomas Polesovsky,修改在7 年前。

RE: URL method whitelisting

Liferay Master 帖子: 676 加入日期: 09-2-13 最近的帖子
Hi,

there is no such whitelist. Every portal deployment use different scenarios.