Skip to content

Commit 2ddc386

Browse files
authored
Update docs/infrastructure_and_maintenance/security/security_checklist.md
1 parent 9470f5e commit 2ddc386

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/infrastructure_and_maintenance/security/security_checklist.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -144,7 +144,7 @@ Reduce your attack surface by exposing only what you must.
144144
- { path: ^/search, roles: ROLE_USER}
145145
```
146146

147-
### Limit access to code blocks
147+
### Limit access to Code blocks
148148

149149
The [Code block]([[= user_doc =]]/content_management/block_reference/#code-block) in Page Builder is designed to accept any HTML, which includes embedded JavaScript.
150150
This means that malicious JS including cross site scripting (XSS) is necessarily possible for editors that have access to Code blocks. As site administrator you should be aware of this when giving editors access to the Page Builder features, and limit that access only to highly trusted editors. It is possible to

0 commit comments

Comments
 (0)