| ... |
... |
@@ -10,7 +10,7 @@ |
| 10 |
10 |
|
| 11 |
11 |
=== HTTP Strict Transport Security (HSTS) === |
| 12 |
12 |
|
| 13 |
|
-{{figure image="system_general_hsts_en.png" width="600" clear="h3"}} |
|
13 |
+{{figure image="system_general_hsts_en.png" width="600"}} |
| 14 |
14 |
You can enable HSTS to |
| 15 |
15 |
{{/figure}} |
| 16 |
16 |
|
| ... |
... |
@@ -18,15 +18,11 @@ |
| 18 |
18 |
|
| 19 |
19 |
=== Iframe integration === |
| 20 |
20 |
|
| 21 |
|
-{{figure image="system_general_iframe_en.png" clear="h3" width="600"}} |
| 22 |
|
- You can optionally whitelist third-party pages that should be allowed to include backend pages via iframes. |
| 23 |
|
-{{/figure}} |
|
21 |
+WIP |
| 24 |
24 |
|
| 25 |
|
-By default, {{formcycle/}} blocks any attempts by third-party pages to include backend pages as iframes due to security concerns. In case it becomes necessary to include backend pages as an iframe, you can whitelist allowed third-party pages in this menu. The values you enter here are used for the //frame-ancestors// directive of the //Content-Security-Policy// HTTP header, see for example [[mdn web docs>>url:https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors||target="_blank"]] for an in-depth descrption of the allowed values. |
| 26 |
|
- |
| 27 |
27 |
=== Password policies === |
| 28 |
28 |
|
| 29 |
|
-{{figure image="PasswordPolicies.PNG" width="600" clear="h3"}} |
|
25 |
+{{figure image="PasswordPolicies.PNG" width="600"}} |
| 30 |
30 |
|
| 31 |
31 |
{{/figure}} |
| 32 |
32 |
|
| ... |
... |
@@ -34,7 +34,7 @@ |
| 34 |
34 |
|
| 35 |
35 |
=== Referrer policy === |
| 36 |
36 |
|
| 37 |
|
-{{figure image="system_general_referrer_en.png" width="600" clear="h3"}} |
|
33 |
+{{figure image="system_general_referrer_en.png" width="600"}} |
| 38 |
38 |
Referrer policy |
| 39 |
39 |
{{/figure}} |
| 40 |
40 |
|
| ... |
... |
@@ -42,17 +42,13 @@ |
| 42 |
42 |
|
| 43 |
43 |
=== Session cookie settings === |
| 44 |
44 |
|
| 45 |
|
-{{figure image="system_general_session_cookie_en.png" clear="h3" width="600"}} |
| 46 |
|
- If possible, we recommend you make the settings for the session cookie as strict as possible and require HTTPS. |
| 47 |
|
-{{/figure}} |
|
41 |
+WIP |
| 48 |
48 |
|
| 49 |
|
-The session cookie identifies a user session and keeps track of the user while they are logged in. Here you can change whether the session cookie should be limited to HTTPS connections (Secure) and whether it should be transmitted to third-party sites (SameSite). We recommend you activate the Secure flag when you solely use HTTPS. Allowing the session cookie on third-party pages is necessary for some use cases such as embedding forms via AJAX into external pages. |
| 50 |
|
- |
| 51 |
51 |
== Protocol == |
| 52 |
52 |
|
| 53 |
53 |
=== Automatic deletion of protocol entries === |
| 54 |
54 |
|
| 55 |
|
-{{figure image="system_delete_protocoll_en.png" width="600" clear="h3"}} |
|
47 |
+{{figure image="system_delete_protocoll_en.png" width="600"}} |
| 56 |
56 |
You can delete old protocol entries automatically, which may also help prevent the database from growing too large. |
| 57 |
57 |
{{/figure}} |
| 58 |
58 |
|
| ... |
... |
@@ -60,20 +60,13 @@ |
| 60 |
60 |
|
| 61 |
61 |
=== Generated protocol entries === |
| 62 |
62 |
|
| 63 |
|
-{{figure image="system_general_generated_protocol_entries_de.png" clear="h3" width="600"}} |
| 64 |
|
- These settings let you enable or disable certain types of protocol entries. |
| 65 |
|
-{{/figure}} |
|
55 |
+WIP |
| 66 |
66 |
|
| 67 |
|
-; Add protocol entry when an automatic form submission by a bot was detected |
| 68 |
|
-: {{formcycle/}} tries to detect attempts by machines (bots) to submit forms automatically. When a bot was detected, the submission is blocked. If this option is enabled, a processing [[protocol entry>>doc:Formcycle.UserInterface.Protocol]] is created. |
| 69 |
|
-; Add protocol entry when attempting to submit a form with an invalid submit button |
| 70 |
|
-: You can add [[buttons>>doc:Formcycle.Designer.Form.FormElements.Button]] to a form that allows users to submit the form. Within the workflow, you can [[check whether a certain buttons was pressed>>doc:Formcycle.Designer.Workflow.Events.SubmitButton]] and run certain actions depending on which button was pressed. Starting with version 7, it is possible to validate whether the submit button actually existed in the form, which helps prevent form records from being manipulated. If this option is enabled, a processing [[protocol entry is created>>doc:Formcycle.UserInterface.Protocol]] when a form was submitted with an invalid submit button. |
| 71 |
|
- |
| 72 |
72 |
== Limits == |
| 73 |
73 |
|
| 74 |
74 |
=== Form and file cache === |
| 75 |
75 |
|
| 76 |
|
-{{figure image="system_general_cache_en.png" width="600" clear="h3"}} |
|
61 |
+{{figure image="system_general_cache_en.png" width="600"}} |
| 77 |
77 |
You can change the form and file cache size, which may be necessary when you have got many forms , or you can deactivate the cache for testing purposes. |
| 78 |
78 |
{{/figure}} |
| 79 |
79 |
|
| ... |
... |
@@ -95,7 +95,7 @@ |
| 95 |
95 |
|
| 96 |
96 |
=== System limits === |
| 97 |
97 |
|
| 98 |
|
-{{figure image="system_general_limits_en.png" width="600" clear="h3"}} |
|
83 |
+{{figure image="system_general_limits_en.png" width="600"}} |
| 99 |
99 |
System limits |
| 100 |
100 |
{{/figure}} |
| 101 |
101 |
|
| ... |
... |
@@ -112,7 +112,7 @@ |
| 112 |
112 |
|
| 113 |
113 |
=== Loopback URL === |
| 114 |
114 |
|
| 115 |
|
-{{figure image="system_general_loopback_en.png" width="600" clear="h3"}} |
|
100 |
+{{figure image="system_general_loopback_en.png" width="600"}} |
| 116 |
116 |
Loopback URL |
| 117 |
117 |
{{/figure}} |
| 118 |
118 |
|
