RoboHelp Output Security Issues
Greetings!
I am using RH 2020.7.0 to generate Frameless Help. Our client is running security scans on the RH output and has identified three issues with possible solutions:
1 - 150124 Clickjacking - Framable Page (Solutions: X-Frame-Options: This HTTP response header can be used to prevent framing of web pages. OR/AND Content-Security-Policy: The 'frame-ancestors' directive can be used to prevent framing of web pages.)
2 - 150122 Cookie Does Not Contain The "secure" Attribute (Solutions If the associated risk of a compromised account is high, apply the "secure" attribute to cookies and force all sensitive requests to be sent via HTTPS.)
3 - 150123 Cookie Does Not Contain The "HTTPOnly" Attribute (Solution: If the associated risk of a compromised account is high, apply the "HTTPOnly" attribute to cookies.)
I do not understand the issues nor how to apply the recommended solutions.
Can anyone help guide me as to how and in what files would I make these changes?
Thank you!
Tonya
AdChoices