Online Help Security Scan Issue

Postby cynthiad on Mon Nov 05, 2018 10:14 am

HI,
I have a security issue.

We did a Vericode scan and the scan showed that the online documentation threw 27 Cross-Site Scripting errors. They all dealt with one javascript file which contains a JQuery cookie reference. We believe it’s the JQuery cookie reference that’s causing the Cross-Site Scripting errors.

Have you seen this issue? Can it be resolved?

Thanks,
Cynthia Didio
cynthiad
Propeller Head
 
Posts: 17
Joined: Tue May 23, 2017 8:02 am

Re: Online Help Security Scan Issue

Postby Nita Beck on Mon Nov 05, 2018 11:29 am

What version of Flare are you using? The latest update (Flare 2018 r2), which came out a few days ago, apparently has fixed something having to do with security.

Release notes are here: [url]https://kb.madcapsoftware.com/Content/Flare/General/GEN1060F_-_Flare_2018_r2_Release_Notes.htm//url]

A number of the bug fixes address cross-site scripting.

HTH
Nita
Image
Content Strategist / Information Architect / Flare Consultant: http://beck-communications.com
Manager, Rochester Flare User Group: http://www.facebook.com/RochesterFlareUserGroup
Nita Beck
Senior Propellus Maximus
 
Posts: 3107
Joined: Thu Feb 02, 2006 9:57 am
Location: Pittsford, NY

Re: Online Help Security Scan Issue

Postby cynthiad on Tue Nov 06, 2018 6:34 am

Nita,
I am using doc-2-help 2014 not Flare. Is this a known issue that can be fixed?
Thanks,
Cynthia Didio
cynthiad
Propeller Head
 
Posts: 17
Joined: Tue May 23, 2017 8:02 am

Re: Online Help Security Scan Issue

Postby Nita Beck on Tue Nov 06, 2018 6:36 am

Oh, I’m sorry. I wasn’t paying attention...

I actually have no idea about Doc-To-Help and suggest that you take this up with MadCap tech support, if you’re able.
Nita
Image
Content Strategist / Information Architect / Flare Consultant: http://beck-communications.com
Manager, Rochester Flare User Group: http://www.facebook.com/RochesterFlareUserGroup
Nita Beck
Senior Propellus Maximus
 
Posts: 3107
Joined: Thu Feb 02, 2006 9:57 am
Location: Pittsford, NY

Re: Online Help Security Scan Issue

Postby cynthiad on Tue Nov 06, 2018 6:49 am

Nita,
Please provide the tech support number. I appreciate it.

Cynthia Didio
cynthiad
Propeller Head
 
Posts: 17
Joined: Tue May 23, 2017 8:02 am

Re: Online Help Security Scan Issue

Postby SKamprowski on Tue Nov 06, 2018 7:02 am

Hi,

I suggest to do a test with current DocToHelp Version i.e. V5. I assume it doen't matter when you try it with a test Installation, best on another machine.
Kind regards,
Sabine Kamprowski
DocToHelp MVP
SKamprowski
Sr. Propeller Head
 
Posts: 222
Joined: Fri Feb 13, 2015 8:25 am
Location: Germany

Re: Online Help Security Scan Issue

Postby SKamprowski on Tue Nov 06, 2018 7:02 am

Hi,

I suggest to do a test with current DocToHelp Version i.e. V5. I assume it doen't matter when you try it with a test Installation, best on another machine.
Kind regards,
Sabine Kamprowski
DocToHelp MVP
SKamprowski
Sr. Propeller Head
 
Posts: 222
Joined: Fri Feb 13, 2015 8:25 am
Location: Germany

Re: Online Help Security Scan Issue

Postby cynthiad on Tue Nov 06, 2018 7:12 am

Nita,
Please just send me the tech support number. I will work with them. I appreciate it.
cynthiad
Propeller Head
 
Posts: 17
Joined: Tue May 23, 2017 8:02 am

Re: Online Help Security Scan Issue

Postby SKamprowski on Tue Nov 06, 2018 7:26 am

You may find the phone number here….
https://www.doctohelp.com/support/contact-options.aspx
And I'm sorry for my duplicated last reply.
Kind regards,
Sabine Kamprowski
DocToHelp MVP
SKamprowski
Sr. Propeller Head
 
Posts: 222
Joined: Fri Feb 13, 2015 8:25 am
Location: Germany

Re: Online Help Security Scan Issue

Postby cynthiad on Tue Nov 06, 2018 9:55 am

Nita,
Thank you for sending the information!
cynthiad
Propeller Head
 
Posts: 17
Joined: Tue May 23, 2017 8:02 am

Re: Online Help Security Scan Issue

Postby Nita Beck on Tue Nov 06, 2018 10:48 pm

Thank Sabine, not me! She’s our resident DocTo-Help guru.
Nita
Image
Content Strategist / Information Architect / Flare Consultant: http://beck-communications.com
Manager, Rochester Flare User Group: http://www.facebook.com/RochesterFlareUserGroup
Nita Beck
Senior Propellus Maximus
 
Posts: 3107
Joined: Thu Feb 02, 2006 9:57 am
Location: Pittsford, NY


Return to Doc-To-Help General Discussion

Who is online

Users browsing this forum: No registered users and 1 guest