KeyView 24.1

# Security Best Practices

This section outlines some security best practices to consider when using KeyView.

- Run Export Out-of-Process. Export can process documents in a separate process, which protects the stability of the calling application. OpenText strongly recommends that you configure Export to do this, by using the instructions in Convert Files Out of Process.

- Protect the Temporary Directory. Some of the data Export writes to the temporary directory will contain sensitive information, so this location must be protected. See Protect the Temporary Directory.

- Run Export with Minimal Privileges. In the event that a malicious actor causes Export to behave dangerously, the potential damage is limited if Export is running with fewer privileges. See Run HTML Export with Minimal Privileges.

- Prevent DLL Pre-loading Attacks. When your application attempts to load the `kvhtml` shared library and it is not found, the Operating System may search various locations, which can lead to a DLL pre-loading attack. For ways to prevent this, see Mitigate Against DLL Pre-Loading.

- Keep Export Up to Date. New Export releases may include security updates, including updates to third-party libraries. See Third-Party Library Upgrade Policy.

- Sanitize absolute paths when extracting subfiles. Container files can specify paths that point outside the extract directory, which can lead to a type of path traversal vulnerability known as Zip Slip. KeyView automatically sanitizes relative paths to prevent this, but OpenText recommends also configuring KeyView to sanitize absolute paths. See Sanitize Absolute Paths.

Copyright 1997-2023 Open Text
Version 24.1 | Last updated December 2023

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: IDOL KeyView 24.1

Topic Title: Security Best Practices