Notes.ini Entry


Name:
    DominoValidateFramesetSRC

Syntax
    DominoValidateFramesetSRC=0 / 1

Applies to:
    Servers

Add-on:

    First Release:
      7.0

    Obsolete since:

      Category:
        Web, HTTP

      Default:
        None

      UI equivalent:
        None

      Description:
      If this variable is set to1 and the Web Server OpenFrameSet command has a Src argument, the argument's value is validated to insure that it designates a design note in the same database as the fraemset being opened. This prevents improper use of the Src argument to redirect browsers to arbitrary web sites (a possible security vulnerability)

      Note Note that the Src and Frame arguments are used by the autoframe feature and are not intended for general use.