| ... |
... |
@@ -10,7 +10,7 @@ |
| 10 |
10 |
|
| 11 |
11 |
=== HTTP Strict Transport Security (HSTS) === |
| 12 |
12 |
|
| 13 |
|
-{{figure image="system_general_hsts_en.png" width="600"}} |
|
13 |
+{{figure image="system_general_hsts_en.png" width="600" clear="h3"}} |
| 14 |
14 |
You can enable HSTS to |
| 15 |
15 |
{{/figure}} |
| 16 |
16 |
|
| ... |
... |
@@ -18,8 +18,8 @@ |
| 18 |
18 |
|
| 19 |
19 |
=== Iframe integration === |
| 20 |
20 |
|
| 21 |
|
-{{figure image="system_general_iframe_de.png" clear="h3" width="600"}} |
| 22 |
|
-Per Whitelist kann es Drittseiten erlaubt werden, Backend-Seiten als IFrame einbinden zu dürfen. |
|
21 |
+{{figure image="system_general_iframe_en.png" clear="h3" width="600"}} |
|
22 |
+ You can optionally whitelist third-party pages that should be allowed to include backend pages via iframes. |
| 23 |
23 |
{{/figure}} |
| 24 |
24 |
|
| 25 |
25 |
By default, {{formcycle/}} blocks any attempts by third-party pages to include backend pages as iframes due to security concerns. In case it becomes necessary to include backend pages as an iframe, you can whitelist allowed third-party pages in this menu. The values you enter here are used for the //frame-ancestors// directive of the //Content-Security-Policy// HTTP header, see for example [[mdn web docs>>url:https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors||target="_blank"]] for an in-depth descrption of the allowed values. |
| ... |
... |
@@ -26,7 +26,7 @@ |
| 26 |
26 |
|
| 27 |
27 |
=== Password policies === |
| 28 |
28 |
|
| 29 |
|
-{{figure image="PasswordPolicies.PNG" width="600"}} |
|
29 |
+{{figure image="PasswordPolicies.PNG" width="600" clear="h3"}} |
| 30 |
30 |
|
| 31 |
31 |
{{/figure}} |
| 32 |
32 |
|
| ... |
... |
@@ -34,7 +34,7 @@ |
| 34 |
34 |
|
| 35 |
35 |
=== Referrer policy === |
| 36 |
36 |
|
| 37 |
|
-{{figure image="system_general_referrer_en.png" width="600"}} |
|
37 |
+{{figure image="system_general_referrer_en.png" width="600" clear="h3"}} |
| 38 |
38 |
Referrer policy |
| 39 |
39 |
{{/figure}} |
| 40 |
40 |
|
| ... |
... |
@@ -42,13 +42,17 @@ |
| 42 |
42 |
|
| 43 |
43 |
=== Session cookie settings === |
| 44 |
44 |
|
| 45 |
|
-WIP |
|
45 |
+{{figure image="system_general_session_cookie_de.png" clear="h3" width="600"}} |
|
46 |
+ If possible, we recommend you make the settings for the session cookie as strict as possible and require HTTPS. |
|
47 |
+{{/figure}} |
| 46 |
46 |
|
|
49 |
+The session cookie identifies a user session and keeps track of the user while they are logged in. Here you can change whether the session cookie should be limited to HTTPS connections (Secure) and whether it should be transmitted to third-party sites (SameSite). We recommend you activate the Secure flag when you solely use HTTPS. Allowing the session cookie on third-party pages is necessary for some use cases such as embedding forms via AJAX into external pages. |
|
50 |
+ |
| 47 |
47 |
== Protocol == |
| 48 |
48 |
|
| 49 |
49 |
=== Automatic deletion of protocol entries === |
| 50 |
50 |
|
| 51 |
|
-{{figure image="system_delete_protocoll_en.png" width="600"}} |
|
55 |
+{{figure image="system_delete_protocoll_en.png" width="600" clear="h3"}} |
| 52 |
52 |
You can delete old protocol entries automatically, which may also help prevent the database from growing too large. |
| 53 |
53 |
{{/figure}} |
| 54 |
54 |
|
| ... |
... |
@@ -62,7 +62,7 @@ |
| 62 |
62 |
|
| 63 |
63 |
=== Form and file cache === |
| 64 |
64 |
|
| 65 |
|
-{{figure image="system_general_cache_en.png" width="600"}} |
|
69 |
+{{figure image="system_general_cache_en.png" width="600" clear="h3"}} |
| 66 |
66 |
You can change the form and file cache size, which may be necessary when you have got many forms , or you can deactivate the cache for testing purposes. |
| 67 |
67 |
{{/figure}} |
| 68 |
68 |
|
| ... |
... |
@@ -84,7 +84,7 @@ |
| 84 |
84 |
|
| 85 |
85 |
=== System limits === |
| 86 |
86 |
|
| 87 |
|
-{{figure image="system_general_limits_en.png" width="600"}} |
|
91 |
+{{figure image="system_general_limits_en.png" width="600" clear="h3"}} |
| 88 |
88 |
System limits |
| 89 |
89 |
{{/figure}} |
| 90 |
90 |
|
| ... |
... |
@@ -101,7 +101,7 @@ |
| 101 |
101 |
|
| 102 |
102 |
=== Loopback URL === |
| 103 |
103 |
|
| 104 |
|
-{{figure image="system_general_loopback_en.png" width="600"}} |
|
108 |
+{{figure image="system_general_loopback_en.png" width="600" clear="h3"}} |
| 105 |
105 |
Loopback URL |
| 106 |
106 |
{{/figure}} |
| 107 |
107 |
|