8 results found

1. Implement SRI attributes for injected JavaScript & Styles

   The Optimizely PAAS CMS platform has multiple touchpoints where scripts are injected into the frontend UI. Examples include Optimizely Forms, Content Recommendations, Search & Navigation etc.

   When these scripts are injected into the UI, they are not added with a Sub-resource Integrity attribute. An SRI check allows us to instruct the browser that it should not load a tampered version of a JS or CSS file and can protect users from man in the middle attacks. You can read more about SRI here: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

   This is a commonly reported issue in penetration tests and clients are becoming increasingly more security conscious and request that we make sure SRI attributes are in place. While we can add SRI checks for JS and CSS files that we generate, the files injected by Optimizely lack these attributes. We are left explaining to the customer that we do not control these scripts and styles

   Our desired output would be that scripts and styles rendered by Optimizely code include an SRI attribute.

   The Optimizely PAAS CMS platform has multiple touchpoints where scripts are injected into the frontend UI. Examples include Optimizely Forms, Content Recommendations, Search & Navigation etc.

   When these scripts are injected into the UI, they are not added with a Sub-resource Integrity attribute. An SRI check allows us to instruct the browser that it should not load a tampered version of a JS or CSS file and can protect users from man in the middle attacks. You can read more about SRI here: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

   This is a commonly reported issue in penetration tests and clients are becoming increasingly more security… more

   10 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Future Consideration  ·  AdminMatthew Slim (Product Manager, Optimizely) responded

   Thanks for raising this - just to let you know this is now in our backlog. While we can’t share an exact release date yet, this means it’s planned for consideration in the future. Thanks for helping us prioritize this work.

2. Request for Wildcard Hostname Support on DXP

   Wildcard hostnames are not supported on DXP, and all configured hostnames must be explicitly mapped in the CMS admin.

   We will have thousands of customers for whom we will be setting up individual sites. Is it possible to configure a wildcard entry on DXP—such as *.procase.riogrande.com—to support this model? Managing tens of thousands of individual URLs in Optimizely DXP would be difficult for both Opti and us, and it would significantly increase our customer onboarding time.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Future Consideration  ·  1 comment  ·  DXP, Hosting & Infrastructure  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Security

   We are currently using Anglian water Optimizely CMS 11 and to strengthen our bot mitigation capabilities, we would like to implement Cloudflare Bot Management, including fingerprinting mechanisms for advanced bot detection.
   We understand that fingerprinting is a separate product offered by Cloudflare and is not currently included in the Optimizely DXP offering.

   We are requesting your Implement to:

   1. Implement Cloudflare Bot Management within our existing Optimizely CMS 11 setup.
   2. Integrate fingerprinting mechanisms to enhance bot detection and protection. 3.Configure real-time anomaly detection to throttle traffic from suspicious ASNs or geolocations.
   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Future Consideration  ·  1 comment  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Change Log filtering

   Change Log should be improved so it can have multi Changed By selection (with auto complete), and Exclude Changed By to ignore certain changes made by automated jobs (import jobs etc.)

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Future Consideration  ·  0 comments  ·  Editing (Content)  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Redirect page after expiration

   It would be great if it is possible te set a redirection (just like in the no-found handler) when a page is expired and is replaced by another page in the website. This would make the process much more user-friendly.

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Future Consideration  ·  AdminMatthew Slim (Product Manager, Optimizely) responded

   Thanks for raising this - just to let you know this is now in our backlog. While we can’t share an exact release date yet, this means it’s planned for consideration in the future. Thanks for helping us prioritize this work.

6. Need to get pinned regularly used pages in cms

   There is lot of sites and pages in Optimizely CMS and content editors feel that it would be easier if they could get pinned pages they are frequently editing. Now it requires to open levels and scroll before getting the correct page if search finds many pages.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Future Consideration  ·  1 comment  ·  Editing (Content)  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Ability to add custom CAA records in a managed clients zone in Optimizely Cloudflare account
   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Future Consideration  ·  0 comments  ·  DXP, Hosting & Infrastructure  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Make Language Manager smarter - extend translate API with IContent and Property

   The Translate Interface in language manager add-on (EPiServer.Labs.LanguageManager, to make translations smarter, It would be benificial to add IContent and propertyName. With that, we can get Custom Property Attributes, or other properties to understand better the context.
   Change from
   TranslateTextResult Translate(
   string inputText,
   string fromLang,
   string toLang;
   to
   TranslateTextResult Translate(
   string inputText,
   CultureInfo fromLang,
   CultureInfo toLang,
   IContent currentContent, //or similar ContentReference
   string propertyName
   ;
   With this, we could make the translations smarter by knowing the context of the block or page. We could also read any custom attribute on the property if any.

   9 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Translations  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Future Consideration  ·  AdminMaheen Neha (Senior Product Manager, Optimizely) responded

   While we do not plan to pursue it at this time, we’re going to revisit this idea for consideration in the future. Please continue to provide feedback or additional information, and thank you for helping us build a case for pursuing this idea in future.