HTML Policy Settings

[Policy] > [Basic Demilitarization Policy] > [HTML] Settings

HTML tab provides settings to remove threat elements such as scripts and links included in web-based files or HTML content.
By statically handling elements that can be executed dynamically, it blocks user execution-based security threats.

⚠️ The permission to set the basic de-identification policy is granted to [Administrator Type - System Administrator], and
Administrator permission settings can be found under [Administrator Settings] > [Account and Permission Management].

---

Detailed Description of Settings Items

Policy Name	Description
HTML script removal settings	Set whether to remove script code included in the HTML document. A script is code that automatically executes when an HTML document is viewed, which can trigger malicious behavior.
HTML Web Beacon Removal Settings	Set whether to remove web beacon elements for tracking user behavior within the HTML document. Web beacons are implemented using img, iframe, etc., and can pose a security threat by tracking user behavior or linking to malicious sites.
HTML hyperlink removal settings	Set whether to remove hyperlinks included in the HTML document. Hyperlinks can lead to malicious sites or cause security threats through external connections.

Input Rules and Precautions

• HTML script is in a way that the decontamination system cannot detect.**It may cause malicious behavior.**It is generally recommended to set removal options.
• Web beacon is used for collecting user information andBehavior TrackingSince it is used as a tool for attacking purposes,Removal when bringing in internal company documentsis recommended.
• Hyperlinks can lead to malicious external sites or phishing paths, so for security reasonsRemoval is recommended..

Reference Notes

Terminology	Definition	Security Threats and Policy Considerations	example
HTML Script	<script>written inside the tagJavaScript codeto, an element that gives functionality to a web page	When viewing an HTML documentAutomatic Execution Attack, Download, Popup Inductionand malicious activities may be included	Connect to external server and create ad window as soon as the document is opened.
Web Beacon (Web Beacon)	<img>, <iframe>, <object>using, etc.Send user viewing information to the serverTracking tools	Sending personal information such as user location, IP, and viewing time to the server.Behavior Tracking and Information Leakagepossible	Viewing tracking with a transparent 1-pixel image
hyperlink	<a href="...">Connect to external resources such as websites, emails, and files using tags.	to malicious sites or phishing pagesInducing ConnectionPossible. It is possible to induce access to the attack page with just a document click.	Clicking "Participate in Event" redirects to a malicious site

• The above settings are.htmlIt only applies to HTML-based files like this.
• Changes can be tracked and restored through the [Policy Change History].