by Ms. Celine Gerlach
Published 3 years ago
Updated 2 years ago
10 min read
For example, users can enter HTML using the content editor in blogs and discussion boards, and through HTML file uploads. In the past, a security threat was introduced because users could enter potentially dangerous tags, such as script tags. Such tags could be used to execute malicious script in Blackboard Learn, exposing other users to attacks.
Blackboard Learn does not yet support anti-virus scanning on files uploaded by users into the system. ... Any statements about future expectations, plans and prospects for Blackboard represent the Company's views as of January 1, 2013. Actual results may differ materially as a result of various important factors.
What is safe HTML?
Safe HTML is a module that filter the input before the content is stored in the database. ... Safe HTML must be enabled on the Input formats section as a filter for the desired input format. Safe HTML cannot be used in conjunction with PHP Parser Filter because Safe HTML will strip any PHP code.Jul 20, 2007
Is Blackboard secure?
Blackboard follows a secure-by-default policy with Release Notes and Documentation leveraged when special System Administrator consideration is required. Blackboard encourages customers to follow its Secure Configuration best practices guide when one is available and relevant to your specific Blackboard product.
How do you disinfect text in HTML?
Sanitize a string immediately setHTML() is used to sanitize a string of HTML and insert it into the Element with an id of target . The script element is disallowed by the default sanitizer so the alert is removed.Feb 18, 2022
How do you disinfect HTML?
How to sanitize HTML with JavaScriptvar unsanitizedHTML = '';var element = document. ... /** * @param {string} text * @return {string} */ function sanitizeHTML(text) { var element = document. ... var sanitizedHTML = $('
').More items...•Nov 29, 2019
What information does blackboard collect?
The terms state Blackboard collects device, usage, and personal information from users that depends on the type of service used which can include: first name, last name, email address, student ID, account credentials, courses a student is enrolled in, credentials, audio and video recordings, and any other information ...Aug 30, 2021
Does Blackboard have two factor authentication?
Two-step verification and secure single sign-on with SAASPASS will help keep your firm's Blackboard access secure.
What is black board?
Definition of blackboard : a hard smooth usually dark surface used especially in a classroom for writing or drawing on with chalk.
File Uploads via Discussion Board Attachments are not Filtered via Safe HTML
Blackboard follows best practice guidance from many organizations to help strengthen the security of Blackboard Learn's product and program, including: 1 National Institute of Standards and Technology (NIST) 2 European Network and Information Security Agency (ENISA) 3 SANS Institute Open Web Application Security Project (OWASP) 4 Cloud Security Alliance (CSA)
What is TLS in learning?
The Learn SaaS offering secures all communication over the Internet with Transport Layer Security (TLS) technology. TLS ensures that a communication is not read or changed by another entity. Blackboard Learn uses TLS to secure communications between the Web server and the client machine; e.g., a browser.
Can you access SSH keys?
A limited set of staff would have command-line and back-end access through the use of SSH keys. Access is only possible via SSH keys, a more secure method of access versus username/passwords. Keys are managed by a small group and can be revoked at any time.
Is SaaS a security program?
The SaaS application code has been built with security in mind. The Security Team has been involved in the full SDLC to ensure we build security in from the very beginning, following our Security Assurance Program. We have adopted new technologies and taken advantage of their built-in security features and best practices.
Safe HTML filter for the content editor
Users can enter HTML in Blackboard Learn in a variety of ways. For example, users can enter HTML using the content editor in blogs and discussion boards, and through HTML file uploads. In the past, this has introduced a security threat in that users could enter potentially dangerous tags, such as script tags.
Rendering files from an alternate domain
Rendering user-uploaded files from an alternate domain is a defense-in-depth security control. By uploading a piece of content containing potentially malicious scripts, a user could potentially perform session hijacking on the main Blackboard Learn session once a target user accesses the affected content.
File type upload restrictions
A preventative security control that allows System Administrators to define what types of files and MIME types that may be uploaded into the system and how they should be handled.
Anti-virus
Blackboard Learn does not yet support anti-virus scanning on files uploaded by users into the system. This feature is on the Blackboard Learn Product Security Roadmap.
