Enable High Security Plugin
When you activate the High Security plugin, it creates or updates hundreds of different configurations to control the level of security on your instance. These configurations mitigate many of the top OWASP attacks by enabling strict access control, input validation, and output encoding.
The High Security plugin, activated by default, creates more than 900 different configurations to control the level of security on your instance. These configurations enable strict access control, input validation, and output encoding. It separates user functionality from access control management functionality through requiring administrators to explicitly elevate into a security_admin role before making access control changes.
Ensure that the plugin com.glide.high_security is activated.
More information
| Attribute | Description |
|---|---|
| Configuration name | com.glide.high_security |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Plugin |
| Recommended value | The plugin com.glide.high_security is active |
| Default value | |
| Fallback value | |
| Category | |
| Security risk | - Severity score: 9.8 - CVSS rating: Critical - Security risk details: Critical parts of the instance may be exposed to unauthorized access or manipulation. |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Access control