Changes for page What an XWiki Security Review Should Actually Include
Last modified by Agnease on 2026/06/08 18:44
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -239,15 +239,22 @@ 239 239 permissions, extensions, customizations and recovery procedures were configured years earlier. 240 240 </p> 241 241 242 - <div class="resource-note"> 242 + <div class="resource-note related-resources"> 243 + <p><strong>Security review series:</strong></p> 244 + <ul> 245 + <li> 246 + <a href="$xwiki.getURL('resources.xwiki-security-review')">What an XWiki security review should actually include</a> 247 + </li> 248 + <li> 249 + <a href="$xwiki.getURL('resources.xwiki-access-rights-governance')">Why XWiki access rights need a clear governance model</a> 250 + </li> 251 + <li> 252 + <a href="$xwiki.getURL('resources.xwiki-access-rights-review')">How to start an XWiki access-rights review</a> 253 + </li> 254 + </ul> 243 243 <p> 244 - <strong>Security review series:</strong> 245 - this article is the main overview. You can also read 246 - <a href="$xwiki.getURL('resources.xwiki-access-rights-governance')">why XWiki access rights need a clear governance model</a> 247 - and 248 - <a href="$xwiki.getURL('resources.xwiki-access-rights-review')">how to start an XWiki access-rights review</a>. 249 - Future topics will cover authentication and access control, script and programming rights, backup validation, 250 - extension review and operational practices. 256 + Future topics will cover authentication and access control, script and programming rights, 257 + backup validation, extension review and operational practices. 251 251 </p> 252 252 </div> 253 253 ... ... @@ -287,15 +287,22 @@ 287 287 becomes business-critical. 288 288 </p> 289 289 290 - <div class="resource-note"> 291 - <p> 292 - Related resources: 293 - <a href="$xwiki.getURL('resources.xwiki-access-rights-governance')">why XWiki access rights need a clear governance model</a>, 294 - <a href="$xwiki.getURL('resources.xwiki-access-rights-review')">how to start an XWiki access-rights review</a>, 295 - <a href="$xwiki.getURL('resources.why-upgrade-xwiki')">why regular XWiki upgrades matter</a> 296 - and 297 - <a href="$xwiki.getURL('resources.xwiki-custom-development')">how to keep XWiki custom development maintainable across upgrades</a>. 298 - </p> 297 + <div class="resource-note related-resources"> 298 + <p><strong>Related resources:</strong></p> 299 + <ul> 300 + <li> 301 + <a href="$xwiki.getURL('resources.xwiki-access-rights-governance')">Why XWiki access rights need a clear governance model</a> 302 + </li> 303 + <li> 304 + <a href="$xwiki.getURL('resources.xwiki-access-rights-review')">How to start an XWiki access-rights review</a> 305 + </li> 306 + <li> 307 + <a href="$xwiki.getURL('resources.why-upgrade-xwiki')">Why regular XWiki upgrades matter</a> 308 + </li> 309 + <li> 310 + <a href="$xwiki.getURL('resources.xwiki-custom-development')">How to keep XWiki custom development maintainable across upgrades</a> 311 + </li> 312 + </ul> 299 299 </div> 300 300 301 301 <div class="resource-cta">