How secure is jasper server login

[hardcorefs]

 Hi,

with suitable passwords, is jasper server security strong enough to face an internet connection?

HC

[tkavanagh]

Yes, definitely. However, there have been a number of security enhancements in the JasperReports Server version 4.5. And in the version soon to be released (4.7.0) there will be additional security enhancements.

One of the most common attacks against a web site is a cross site scripting attack. And 4.5 and 4.7 has security code in place to lock this down.

So, for instance, for the Tomcat application server (ie if you are using Tomcat with JasperReports Server), you would:

1) "Harden" the operating system that is running the software (take a look at SELinux - Security Enhanced Linux)

2) Set up JasperReports Server to enable SSL and only allow these connections via https (look in the JRS Ultimate Guide for handly instructions)

3) Run the most current JRS

Also, this thread probably belongs on the JasperReports Server thread.

[hardcorefs]

 Hi,

Ok thanks for the answer, glad that it is suitable.

as regards teh forums, your implementiation is a mess

 

after login i only see JasperReports Discussion/Help