(doc) documented XSRF support and disabled per default for now

pull/210/head
Ludovic Marcotte 2016-05-16 08:39:08 -04:00
parent 446531085b
commit 0aed09b517
3 changed files with 6 additions and 0 deletions

View File

@ -735,6 +735,10 @@ any requests being made. Default value is 0, or disabled
|Number of seconds, defaults to 300 (or 5 minutes). Note that _SOGoCacheCleanupInterval_
must be set to a value equal or higher than _SOGoRequestBlockInterval_.
|D |SOGoXSRFValidationEnabled
|Parameter used to enable or not XSRF (also known as CSRF) protection in SOGo.
Default value is `NO`, or disabled.
|=======================================================================
Authentication using LDAP

View File

@ -108,6 +108,7 @@
//SOGoSieveScriptsEnabled = YES;
//SOGoMailAuxiliaryUserAccountsEnabled = YES;
//SOGoTrustProxyAuthentication = NO;
//SOGoXSRFValidationEnabled = YES;
/* General */
//SOGoLanguage = English;

View File

@ -6,6 +6,7 @@
WOPidFile = "/var/run/sogo/sogo.pid";
WOHTTPAdaptorCapitalizeHeaders = YES;
WOPort = "127.0.0.1:20000";
SOGoXSRFValidationEnabled = NO;
NGImap4ConnectionStringSeparator = "/";
NGImap4ConnectionGroupIdPrefix = "$";