Blacklist and whitelist filters | Community
Skip to main content
JakeCham
Level 6
Sep 30, 2020 11:24 AM UTC
Solved

Blacklist and whitelist filters

Hi , 

from where in AEM i can check Blacklist and whitelist filter setting configurations?

I have checked "AEM web console Sling Health check" and /system/console/configMgr/com.adobe.cq.deserfw.impl.DeserializationFirewallImpl.But i was unable to find desired results in there.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Umesh_Thakur
Umesh_ThakurAccepted solution
New Participant
Oct 5, 2020 4:38 AM UTC

I think the settings you are looking for that does not comes by default with general server installation, so you are not able to find it in the configMgr.

Please click on the below links to get some info on it.

https://docs.adobe.com/content/help/en/experience-manager-65/administering/security/mitigating-serialization-issues.html

hope this will help.

Regards

Umesh Thakur

5 replies

Umesh_Thakur
Umesh_ThakurAccepted solution
New Participant
Oct 5, 2020 4:38 AM UTC

I think the settings you are looking for that does not comes by default with general server installation, so you are not able to find it in the configMgr.

Please click on the below links to get some info on it.

https://docs.adobe.com/content/help/en/experience-manager-65/administering/security/mitigating-serialization-issues.html

hope this will help.

Regards

Umesh Thakur

Translate
joerghoh
Employee
Sep 30, 2020 7:07 PM UTC

What settings are you looking for? There are a few settings which I would qualify as allow or deny lists.

Translate
JakeCham
JakeChamAuthor
Level 6
Oct 2, 2020 6:26 AM UTC
i have got vulnerability issue report from one of my client.in there he has provided some links to verify that those links have been blocked properly in black list and white list configurations. i got this project in halfway through so i am looking from where it has been blocked
Translate
Jineet_Vora
New Participant
Sep 30, 2020 11:57 AM UTC

Hi @jakecham,

Not clear on your question but I think may be you're looking for 'Apache Sling Referrer Filter'


Jineet

Translate