To allow users with Internet Explorer to access Stages, set the global.secureMode.IEAccess
config property in config.xml
either to non_root
(= all users except root) or all_users
.
Unmanaged HTML sections in descriptions are an inherent security risk, because process modelers could open the system up to XSS vulnerabilities. Therefore, those features were disabled by default.
To reenable the handling for unmanaged HTML sections in descriptions, set the process.description.displayUnmanagedSections.enabled
and legacy.description.migration.unmanagedSection.templates properties
to true
in config.xml
.
We highly recommend to make those changes only if their impact on security is well understood.