Maren.fritz at 05:50, 5 September 2023

2023-09-05T05:50:28Z

← Older revision		Revision as of 07:50, 5 September 2023
Line 1:		Line 1:
	==~~Security~~==		==Seguridad==
	*'''~~Survey preview only for administration users~~''': ~~By default~~, ~~preview of inactive survey is restricted to authenticated users only~~. ~~If you set this to~~ 'No' ~~any person can test your survey using the survey~~ URL ~~- without logging in to the administration and without having to activate the survey first.~~		'''Vista previa de la encuesta solo para usuarios administrativos''': De forma predeterminada, la vista previa de las encuestas inactivas está restringida solo a los usuarios autenticados. Si configura esto en 'No', cualquier persona puede probar su encuesta usando la URL de la encuesta, ¡sin iniciar sesión en la administración y sin tener que activar la encuesta primero! N!'''Filtrar HTML para XSS''': está activado de forma predeterminada. No estarán autorizados a utilizar etiquetas HTML peligrosas en los textos de sus encuestas/grupos/preguntas/etiquetas (código JavaScript, por ejemplo). La idea detrás de esto es evitar que un operador de encuesta agregue un script malicioso para obtener sus permisos en su sistema. '''Sin embargo, si desea utilizar JavaScript en sus encuestas, deberá desactivarlo''' (se pueden utilizar scripts específicos para plataformas de alojamiento de vídeos).
	*'''~~Filter~~ HTML ~~for~~ XSS''': ~~By default you survey manager will not be authorized to use dangerous~~ HTML ~~tags in their survey~~/~~group~~/~~question~~/~~labels texts~~ (~~for instance~~ JavaScript ~~code~~). ~~This is intended to prevent a survey operator to add malicious~~ script ~~in order to have a true admin raise his permissions on the system~~. '''~~If you want to use any script objects like Javascript scripts of Flash applets in your surveys you will need to switch this off.~~'''		{{Hint\|Text=Los superadministradores nunca tienen su HTML filtrado cuando se guarda o en la vista de encuesta pública. Para ver los efectos del filtrado XSS, se recomienda utilizar una cuenta de usuario normal.}}
	*'''Group member can only see own group''': By default non-admin users defined in the LimeSurvey management interface will only be able to see other users if they belong to at least one group this user belongs to. If you set this to 'No' they can see all users (for example in [[~~Survey security~~]] )		{{Alert\|title=Warning\|text=Con XSS habilitado, algunas partes del sistema del administrador de expresiones no se pueden usar: consulte [ [ExpressionScript_-_Presentation#Seguridad XSS\|XSS y ExpressionScript]].}}

C schmitz: Created page with "==Security== *'''Survey preview only for administration users''': By default, preview of inactive survey is restricted to authenticated users only. If you set this to 'No' any..."

2013-04-13T23:10:08Z

Created page with "==Security== *'''Survey preview only for administration users''': By default, preview of inactive survey is restricted to authenticated users only. If you set this to 'No' any..."

New page

==Security==
*'''Survey preview only for administration users''': By default, preview of inactive survey is restricted to authenticated users only. If you set this to 'No' any person can test your survey using the survey URL - without logging in to the administration and without having to activate the survey first.
*'''Filter HTML for XSS''': By default you survey manager will not be authorized to use dangerous HTML tags in their survey/group/question/labels texts (for instance JavaScript code). This is intended to prevent a survey operator to add malicious script in order to have a true admin raise his permissions on the system. '''If you want to use any script objects like Javascript scripts of Flash applets in your surveys you will need to switch this off.'''
*'''Group member can only see own group''': By default non-admin users defined in the LimeSurvey management interface will only be able to see other users if they belong to at least one group this user belongs to. If you set this to 'No' they can see all users (for example in [[Survey security]] )

Translations:Global settings/9/es - Revision history

Maren.fritz at 05:50, 5 September 2023

C schmitz: Created page with "==Security== *'''Survey preview only for administration users''': By default, preview of inactive survey is restricted to authenticated users only. If you set this to 'No' any..."