Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
security [2020_05_27 16:44] stevensecurity [2020_05_28 06:45] dan
Line 1: Line 1:
  
 ====== Security ====== ====== Security ======
 +== Updated on May 27, 2020 ==
  
 SME provides a SaaS and hybrid on-premises multi-cloud content management solution called the Enterprise File Fabric.  This provides unique federation, governance and data management features. This section of the Wiki outlines the security that is inherent within the SME hosted and on-premises versions of the File Fabric. SME provides a SaaS and hybrid on-premises multi-cloud content management solution called the Enterprise File Fabric.  This provides unique federation, governance and data management features. This section of the Wiki outlines the security that is inherent within the SME hosted and on-premises versions of the File Fabric.
Line 121: Line 122:
 We follow best practices in developing secure software, as mandated by GDPR, protecting for example against injection attacks, cross-site request forgery and session hijacking. We perform a third-party vulnerability code scan for each release. We follow best practices in developing secure software, as mandated by GDPR, protecting for example against injection attacks, cross-site request forgery and session hijacking. We perform a third-party vulnerability code scan for each release.
  
-The following cookies are used. <site> is the subdomain of your instance.+These are the formats of the cookies are used. <site> is the unqualified hostname of the web address. The unqualified hostname of %%https://files.example.com%% is files.
  
- PHPSESSID Unique ID of session. Retention: Session +^ Cookie ^ Type ^ What for ^ Retention ^ 
- +PHPSESSID | Functional | Unique ID of session Session | 
- * site__just_logged_in - Start page logic. Retention: 1 year +| %%<site>__just_logged_in%% | Functional | Start page logic (0 or 1) | 1 year | 
- +autologin | Functional | Token for remember me feature 14 days | 
- autologin - token for remember me feature. Retention: 14 days +| %%<site>__<various>%% | Functional | Remembers settings between sessions such as what folders and panels are collapsed, and the last sort order. e.g. %%files__mainTree_openedFoldersKeys%% | 1 year |
- +
- * site__various - Remembers settings between sessions such as what folders and panels are collapsed, and the last sort order.  Retention: 1 year+
  
 ===== 14 Cyber Essentials ===== ===== 14 Cyber Essentials =====