earth_america
user_standard Log on
action_search_stroke
earth_america
Log on to rate and give feedback 1 2 3 4 5 Log on to rate
0
How to

How to


Products: WebStation
Functionalities: Security
Product version: 2022, 2023
8/29/2024

Configuring Security in WebStation using WebStation

You can configure the security for WebStation using WebStation.

Show More
action_close

For security reasons, the default configuration for WebStation is, for example, not to allow external content to be embedded.

The default configuration can be changed in the Security Settings in WorkStation or in the System Security tab in the Options menu.

Enable external websites to be embedded into WebStation

You can enable external websites to be displayed in WebStation. By selecting this option any website can be embedded.

Enabling external websites to be embedded into WebStation lowers the security significantly. Do not enable external websites to be embedded into WebStation if you do not understand the security implications. For more information, see HTML Utilities .

Lists external websites that are allowed to be embedded into WebStation

You can create a list of websites that are allowed to be embedded into WebStation. The list is a whitelist of allowed external websites.

Enabling external websites to be embedded into WebStation lowers the security significantly. Do not enable external websites to be embedded into WebStation if you do not understand the security implications. For more information, see HTML Utilities .

Enable WebStation to be embedded in another website

You can enable WebStation to be embedded in other sites.

Website to allow access to WebStation when embedded

You can create a list of websites that are allowed to access WebStation when WebStation is embedded in the website.

Type a list of websites that are allowed to access WebStation when WebStation is embedded in the website.

Enable WebStation to use unsafe string evaluated JavaScript methods

Enable the graphic viewer in WebStation to use unsafe string evaluated JavaScript methods like ‘eval’.

Select if you have graphics written in older versions of EBO that cannot be displayed in 3.0 or later. For more information, see Cannot Open Graphics in WebStation .

Enable HSTS pre-load list

HSTS is a preload list supported by Google. It requires a valid certificate on the server. Refer to Google HSTS documentation for more information.

HSTS pre-load list max-age

HSTS is a preload list supported by Google. It requires a valid certificate on the server. Refer to Google HSTS documentation for more information.

Content Security Policy Report Uri

Content Security Policy is a security feature that allows you to take control of the resources your website is permitted to load and the actions it is allowed to take.

Type the name of the endpoint that the browser should use for reporting Content Security Policy violations.

To configure security in WebStation using WebStation

  1. In WebStation, on the Settings menu, click Options .

  2. Click Settings.  

  3. Click Security.  

  4. Configure the security settings.

    Property

    Description

    Enable external websites to be embedded into WebStation

    Select if you want external content to be embedded in WebStation. For more information, see Security Configuration in WebStation .

    Lists external websites that are allowed to be embedded into WebStation

    This setting is for internal R&D use only. The setting does not affect WebStation.

    Enable WebStation to be embedded into another site

    Select if you want WebStation to be embedded in another web site. For more information, see Security Configuration in WebStation .

    Website to allow access to WebStation when embedded

    This setting is for internal R&D use only. The setting does not affect WebStation.

    Enable WebStation to use unsafe string evaluated JavaScript methods

    Select if you have graphics written in older versions of EBO that cannot be displayed in 3.0 or later. For more information, see Cannot Open Graphics in WebStation .

    Enable HSTS pre-load list

    HSTS is a preload list supported by Google. It requires a valid certificate on the server. Refer to Google HSTS documentation for more information.

    HSTS pre-load list max-age

    HSTS is a preload list supported by Google. It requires a valid certificate on the server. Refer to Google HSTS documentation for more information.

  5. Click OK .

See Also

  • Security Configuration in WebStation
  • Configuring Security in WebStation using WorkStation
  • Settings Menu – Options Tab
  • System Security Settings Tab