KeyView 24.4
KeyView Filter SDK Java Programming Guide

# Security Best Practices

This section outlines some security best practices to consider when using KeyView.

- Keep KeyView Up to Date. New releases may include security updates, including updates to third-party libraries. See Third-Party Library Upgrade Policy.
- Run KeyView with Minimal Privileges. In the event that a malicious actor causes KeyView to behave dangerously, the potential damage is limited if KeyView is running with fewer privileges. See Run Filter with Minimal Privileges.

- Run Filter Out-of-Process. By default, Filter processes documents in a separate process, which protects the stability of the calling application. OpenText strongly recommends that you use this default.

- Sanitize absolute paths when extracting subfiles. Container files can specify paths that point outside the extract directory, which can lead to a type of path traversal vulnerability known as Zip Slip. KeyView automatically sanitizes relative paths to prevent this, but OpenText recommends that you also configure KeyView to sanitize absolute paths. See Sanitize Absolute Paths.

Copyright 1997-2024 Open Text
Version 24.4 | Last updated September 2024

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: IDOL KeyView 24.4

Topic Title: Security Best Practices