Set PollRedirectUrlValidator and SubmitActionHelper Properties
The configuration files
PollRedirectUrlValidator.properties
and
SubmitActionHelper.properties
are used to configure
a whitelist of valid redirection targets for the Poll plug-in, in
order to protect end-users from phishing attacks in which they are
redirected to a malicious web site.
The configuration file
escenic-config/com/escenic/poll/PollRedirectUrlValidator.properties
has the following property:
validRedirectUrlHosts
-
A comma-separated list of host names that the Poll plug-in is allowed to redirect to. For example:
validRedirectUrlHosts=escenic.com,ccieurope.com
If
escenic-config/com/escenic/poll/PollRedirectUrlValidator.properties
does not already exist, then copy
PollRedirectUrlValidator.properties
from
escenic-home/engine/plugins/poll/misc/siteconfig/com/escenic/poll
to
escenic-config/com/escenic/poll/
and set the above property.
The configuration file
escenic-config/com/escenic/poll/SubmitActionHelper.properties
can contain one or more properties like this:
redirectUrlValidator.
publication-name-
where publication-name is the name of one of your publications. Create one copy of this property for each publication that makes use of the Poll plug-in and set it to point to your redirect URL validator component. For example:
redirectUrlValidator.dailynews=./PollRedirectUrlValidator redirectUrlValidator.sportsweekly=./PollRedirectUrlValidator
If
escenic-config/com/escenic/poll/SubmitActionHelper.properties
does not already exist, then copy
SubmitActionHelper.properties
from
escenic-home/engine/plugins/poll/misc/siteconfig/com/escenic/poll
to
escenic-config/com/escenic/poll/
and set the above properties.