diff --git a/platform/platform-resources/src/main/resources/platform_portal/security-config.properties b/platform/platform-resources/src/main/resources/platform_portal/security-config.properties index 39970c072c..1f0a276c77 100644 --- a/platform/platform-resources/src/main/resources/platform_portal/security-config.properties +++ b/platform/platform-resources/src/main/resources/platform_portal/security-config.properties @@ -1,7 +1,9 @@ -#Enable/disable the Sanitizer protection activation. This sanitizer protects against multiple attacks such as XSS, but may restrict the use of some character sequences. -security.sanitizer.enabled true #Enable/disable CSRF security filter security.csrf.enabled true +#Enable/disable the Sanitizer protection activation. This sanitizer protects against multiple attacks such as XSS, but may restrict the use of some character sequences. +security.sanitizer.enabled true +#Name of the Attributes excluded from sanitizer protection (comma separated) +security.sanitizer.exclude email,password,password_confirm #Add or not the secure flag to the CSRF token cookie (HTTPS only) security.csrf.cookie.secure false #X-Frame-Options response header value