Class SecurityOptions

Define security-related configuration options for report generation and rendering. Includes settings for logging, textbox content sanitization, hyperlink schemes validation, and code execution policies.

Inheritance

System.Object

SecurityOptions

Namespace: BoldReports.Web

Assembly: BoldReports.Web.dll

Syntax

public sealed class SecurityOptions : Object

Constructors

SecurityOptions()

Declaration

public SecurityOptions()

Properties

CodeExecutionPolicy

Specifies the rules for executing custom code or assemblies within reports. Helps enforce secure execution environments.

Declaration

public CodeExecutionPolicy CodeExecutionPolicy { get; set; }

Property Value

Type	Description
CodeExecutionPolicy

ContentSanitization

Specifies the phases (e.g., Processing, Export) during textbox content sanitization should be applied. Can be combined using bitwise flags.

Declaration

public ContentSanitization ContentSanitization { get; set; }

Property Value

Type	Description
ContentSanitization

ContentSanitizedPrefixes

A list of leading characters (e.g., =, +, -, @) that identify potentially unsafe content such as formulas. Used during textbox content sanitization to prevent injection attacks.

Declaration

public List<string> ContentSanitizedPrefixes { get; set; }

Property Value

Type	Description
System.Collections.Generic.List<System.String>

HyperlinkPolicy

Defines the policy for validating and sanitizing hyperlink schemes embedded in reports. Helps prevent malicious or unsafe link usage.

Declaration

public HyperlinkPolicy HyperlinkPolicy { get; set; }

Property Value

Type	Description
HyperlinkPolicy

ShowDetailedLog

Indicates whether detailed exception information (including stack traces) should be shown to end users. Defaults to true. Set to false to reduce risk of information disclosure.

Declaration

public bool ShowDetailedLog { get; set; }

Property Value

Type	Description
System.Boolean