Revision 1.4

Aug 9, 2022
Functional Update
  • WG250 A22 - Log file access must be restricted to System Administrators, Web Administrators or Auditors.
  • WG255 A22 - Access to the web server log files must be restricted to administrators, web administrators, and auditors.
  • WG290 A22 - Web client access to the content directories must be restricted to read and execute - alias
  • WG290 A22 - Web client access to the content directories must be restricted to read and execute - script alias
  • WG290 A22 - Web client access to the content directories must be restricted to read and execute - script alias match
  • WG342 A22 - Public web servers must use TLS if authentication is required.
  • WG460 A22 - PERL scripts must use the TAINT option.
Miscellaneous
  • Platform check updated.