Docs Developer Site
Developer Docs Enonic XP next Config Admin Configuration

Admin Configuration

Contents

This section describes configuration files related to the XP admin console and standard admin tools

XP Dashboard

com.enonic.xp.app.main.cfg

Content Security Policy

Disabling or changing the built-in Content Security Policy is not recommended. A Dashboard widget that needs external resources, such as an embedded video or a chart library, should declare them through an extension response processor, which applies only where the widget is shown and only for users allowed to see it. The settings below change the policy for every Dashboard page and every user.

You can provide your own header for Content Security Policy using contentSecurityPolicy.header property. Note, that if you provide your own header, you should include all necessary directives, as the default headers (self) will not be added.

Customized Content Security Policy for XP Dashboard
contentSecurityPolicy.header=default-src 'self'; connect-src 'self' ws: wss:; object-src 'none'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://*.youtube.com

To completely turn off Content Security Policy for the Dashboard, set contentSecurityPolicy.enabled property to false.

Disabled Content Security Policy for XP Dashboard
contentSecurityPolicy.enabled=false

Applications app

com.enonic.xp.app.applications.cfg

Disable installation of apps from UI
readonlyMode = true
readonlyMode

Activate read only mode to prevent installation and stop/start of applications via UI. Default: false

Contents

Contents