|
glog.web.security.trustedHost
|
6.1
|
This property, which can be added multiple times, tells the system which hosts are trusted. Only the trusted hosts will be made into links. An example of this property is glog.web.security.trustedHost=www.example.com.
Note: This property does not display in the properties servlet by default. It must be added manually.
|
|
glog.web.security.url.<protocol>.trustedDomain
glog.web.security.url.http.trustedDomain
glog.web.security.url.https.trustedDomain
|
6.3.2
|
Trusted domains can vary by protocol and type. They can be set globally by using the glog.web.security.url.all.trustedDomain property. Alternatively, they can be set by protocol by using the glog.web.security.url.<protocol>.trustedDomain property. If a host is trusted globally, then it is trusted for all protocols. Domains can be specified with the full domain name (e.g. www.example.com). A reserved domain (<all>) is used to trust all domains. This property supports multiple values. By default, all domains are trusted. Instead of defaulting so that no domains are trusted, all domains will be trusted. It is up to you to lock down domains that are not trusted, if you choose to.
|
