Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Status
colourYellow
titlePrio 2
Application Security

Info

(error) open

  • Avoid DoS Attacks
    • The Sling, CQ and dispatcher concept is very vulnerable for DoS Attacks by default
    • Think about generic concept to allow only selectors and suffixes "allowed" by the application (e.g. by regexp patterns)
    • Be compatible with URL fingerprinting concepts of HTML library manager

Status
colourYellow
titlePrio 2
Cookie Policies

Info

(error) open

  • Allow suppression of "non-technical" cookies by uses / cookie warnings
  • Research the capabilities of the new built-in Cookie Management features of CQ6 first