HTML Policy Settings
[Policy] > [Basic Decontamination Policy] > [HTML] Settings
HTML tab provides settings to remove threat elements such as scripts, links, etc. included in web-based files or HTML content.
By statically handling elements that can be executed dynamically, it blocks user execution-based security threats.
⚠️ The basic declassification policy setting authority is granted to [Administrator Type - Super Administrator], and
Administrator permission settings can be done in [Administrator] > [Administrator List].
Detailed Description of Settings Items
| Policy Name | Explanation |
|---|---|
| HTML script removal settings | Set whether to remove the script code included in the HTML document. The script is code that automatically executes when the HTML document is viewed, which can trigger malicious behavior. |
| HTML Web Beacon Removal Settings | Set whether to remove web beacon elements for tracking user behavior within the HTML document. Web beacons are implemented as img, iframe, etc., and can track user behavior or link to malicious sites, posing a security threat. |
| HTML hyperlink removal settings | Set whether to remove hyperlinks included in the HTML document. Hyperlinks can lead to malicious sites or pose security threats through external connections. |
Input Rules and Precautions
- HTML script is in a way that the decontamination system cannot detect.**It may cause malicious behavior.**It is generally recommended to set the removal settings.
- Web beacon is used for collecting user information andBehavior TrackingSince it is used as a tool for attacks,Remove when bringing in internal company documentsis recommended.
- Hyperlinks can lead to malicious external sites or phishing paths, posing security risks.Removal is recommended..
Reference Note
| Terminology | Definition | Security Threats and Policy Considerations | example |
|---|---|---|---|
| HTML Script | <script>written inside the tagJavaScript code- An element that gives action to a web page | When viewing an HTML documentAutomatic Execution Attack, Download, Popup Inductionand malicious acts may be included | Connect to external server and create ad window as soon as the document opens. |
| Web Beacon (Web Beacon) | <img>, <iframe>, <object>using, utilizingSend user viewing information to the serverTracking tools | Sending personal information such as user location, IP, and viewing time to the server.Behavior Tracking and Information Leakagepossible | Tracking views with a transparent 1-pixel image |
| hyperlink | <a href="...">Connect to external resources such as websites, emails, and files using tags. | malicious site or phishing page toInducing ConnectionPossible. It is possible to induce access to the attack page simply by clicking the document. | Clicking "Participate in Event" redirects to a malicious site |
- The above settings are
.htmlIt only applies to HTML-based files like this. - Changes can be tracked and restored through the [Policy Change History].