Skip to Content
Last modified by Agnease on 2026/06/08 18:44
From version 3.3
edited by Agnease
on 2026/06/02 11:04
Change comment: There is no comment for this version
To version 1.9
edited by Agnease
on 2026/05/26 10:48
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -122,10 +122,6 @@
122 122   of small exceptions that nobody reviewed later.
123 123   </p>
124 124  
125 - <p>
126 - For a deeper look at this topic, see <a href="$xwiki.getURL('resources.xwiki-access-rights-governance')">why XWiki access rights need a clear governance model</a>.
127 - </p>
128 -
129 129   <h3>3. Authentication and identity management</h3>
130 130   <p>
131 131   Authentication should be reviewed beyond the simple question of whether users can log in. LDAP, Active
... ... @@ -169,11 +169,11 @@
169 169  
170 170   <div class="resource-inline-cta">
171 171   <p>
172 - <strong>Need a clearer view of your XWiki security posture?</strong>
173 - A structured review can check versions, access rights, authentication,
174 - extensions, custom code, infrastructure, backups and operational practices.
168 + <strong>Not sure how risky your current XWiki version is?</strong>
169 + A short technical review can clarify the upgrade path, extension compatibility,
170 + custom code risks and validation needs before production is touched.
175 175   </p>
176 - <a class="btn btn-secondary" href="$xwiki.getURL('contact.WebHome')">Request a security review</a>
172 + <a class="btn btn-secondary" href="$xwiki.getURL('contact.WebHome')">Request a quick review</a>
177 177   </div>
178 178  
179 179   <h2 id="security-checklist">XWiki security review checklist</h2>
... ... @@ -236,16 +236,6 @@
236 236   permissions, extensions, customizations and recovery procedures were configured years earlier.
237 237   </p>
238 238  
239 - <div class="resource-note">
240 - <p>
241 - <strong>Security review series:</strong>
242 - this article is the main overview. You can also read
243 - <a href="$xwiki.getURL('resources.xwiki-access-rights-governance')">why XWiki access rights need a clear governance model</a>.
244 - Future topics will cover authentication and access control, script and programming rights, backup validation,
245 - extension review and operational practices.
246 - </p>
247 - </div>
248 -
249 249   <h2 id="security-review-faq">XWiki security review FAQ</h2>
250 250  
251 251   <h3>What should an XWiki security review include?</h3>
xwiki-security-review.png
Author
... ... @@ -1,1 +1,0 @@
1 -XWiki.Admin
Size
... ... @@ -1,1 +1,0 @@
1 -1.3 MB
Content