HTML object tag - Fluid Topics - Latest

Fluid Topics Configuration and Administration Guide

Category
Reference Guides
Audience
public
Version
Latest

To prevent privilege escalation attack, the HTML object tag toggle improves portal security by removing all <object> HTML tags in the body of topics.

Users with the ADMIN role can activate this toggle in the Security administration interface.

Disabling the toggle makes the portal vulnerable to privilege escalation attacks by users with the KHUB_ADMIN or CONTENT_PUBLISHER role.