{"id":585,"date":"2021-07-14T07:44:44","date_gmt":"2021-07-14T07:44:44","guid":{"rendered":"http:\/\/www.skybridgeinfotech.com\/blog\/?p=585"},"modified":"2024-11-13T06:06:58","modified_gmt":"2024-11-13T06:06:58","slug":"sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india","status":"publish","type":"post","link":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/","title":{"rendered":"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India"},"content":{"rendered":"<h2>Sitecore 9.x Security Hardening<\/h2>\n<p>Whenever we have a website that has accessibility to everyone, maintaining security will be an important factor in order to avoid security breaches and data thefts. Web security is at the front of every business person&#8217;s mind. So\u00a0Sitecore has recommended several key points for making your platform more secure, below are \u00a0few security tasks that would be good practice to follow that,<\/p>\n<ol>\n<li>Login security<\/li>\n<li>Deny anonymous users access to key folders<\/li>\n<li>Disable client RSS feeds<\/li>\n<li>Secure the file upload functionality<\/li>\n<li>Disable SQL Server access from XSLT<\/li>\n<li>Secure Telerik controls<\/li>\n<li>Limit access to certain file types<\/li>\n<li>Protect Phantom JS<\/li>\n<li>Protect media requests<\/li>\n<li>Remove header information from responses sent by your website<\/li>\n<\/ol>\n<p><strong>Login security<\/strong><\/p>\n<p>We must use the strong password policy recommended by MSDN in order to avoid hacking the password by hackers. Change\u00a0Hash algorithm\u00a0for password encryption. Open web. Config file and in the &lt;membership&gt; node, set the\u00a0hash algorithm Type to SHA512.<\/p>\n<p>We must change the administrator password to a strong password. Changing the password prevents unauthorized users from using the default password to access the admin account. \u00a0If possible disable and create named Administrator accounts.<\/p>\n<p>Turn of remember me for login page. On the Sitecore Identity Server role, open <em>sitecore\/Sitecore.Plugin.IdentityServer\/Config\/identityServer.xml<\/em>\u00a0file and set the\u00a0Allow Remember Login\u00a0setting to\u00a0false. This also ignores any existing\u00a0Remember me\u00a0cookies, and all users have to log in again.<\/p>\n<p><strong>Deny anonymous users access to key folder<\/strong>s<\/p>\n<p>It is important to disable\u00a0the Anonymous Authentication\u00a0under IIS Settings for the following folders within the Sitecore Website.<\/p>\n<ul>\n<li>\/App_Config<\/li>\n<li>\/Sitecore\/admin<\/li>\n<li>\/sitecore\/debug<\/li>\n<li>\/sitecore\/login<\/li>\n<\/ul>\n<p><em>Below is an example way to disable it,<\/em><\/p>\n<ul>\n<li>Get in Sitecore Instance and expand the Sitecore website<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"size-full wp-image-591\" src=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Deny-anonymous-users-access-to-key-folders.png\" alt=\"Deny anonymous users access to key folders\" width=\"165\" height=\"90\" \/><\/p>\n<ul>\n<li>Select App Config and select it. Once App Config is selected, look to your right and select the Authentication icon to double click on it.<\/li>\n<\/ul>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-588\" src=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-Anonymous-Authentication-under-IIS-Settings.png\" alt=\"Sitecore Anonymous Authentication under IIS Settings\" width=\"492\" height=\"508\" \/><\/p>\n<ul>\n<li>In the Authentication folder, you will see the list of all authentication methods available on your\u00a0Web Server.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-590\" src=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/all-authentication-methods-available-on-your-Web-Server.png\" alt=\"all authentication methods available on your Web Server\" width=\"721\" height=\"257\" \/><\/p>\n<ul>\n<li>Click on the Anonymous Authentication, disable it by selecting it on the Actions panel at your right.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-592\" src=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Restart-IIS-Skybrige-infotech.png\" alt=\"Restart IIS - Skybrige infotech\" width=\"1024\" height=\"212\" \/><\/p>\n<ul>\n<li>Restart IIS<\/li>\n<\/ul>\n<p><strong>Disable client RSS feeds<\/strong><\/p>\n<p>In case of our Sitecore installation contains sensitive information that you want to protect, you should disable the Sitecore client RSS feeds. If an unauthorized user gains access to the URL of a client RSS feed, they can follow the link and view all the content contained in the client feed even though their own security permissions do not give them access to this item. The users who are subscribed to Sitecore client RSS feeds have direct access to the item given as RSS feed to them and they will not have to identify themselves to the Sitecore security system when they view the feed.<\/p>\n<p><strong>To disable the Sitecore client RSS feed:<\/strong><\/p>\n<ol>\n<li>Open the web.config file.<\/li>\n<li>Locate the\u00a0&lt;httpHandlers&gt;\u00a0section. Depending on your IIS pool, this section may be called\u00a0&lt;Handlers&gt;.<\/li>\n<li>Remove the following handler:<\/li>\n<\/ol>\n<p><em>&lt;add verb=&#8221;*&#8221; path=&#8221;sitecore_feed.ashx&#8221; type=&#8221;Sitecore.Shell.Feeds.FeedRequestHandler, Sitecore.Kernel&#8221;\/&gt;<\/em><\/p>\n<p><strong>Secure the file upload functionality<\/strong><\/p>\n<ul>\n<li>If we are allowing users to modify the content of the\u00a0upload\u00a0folder, we also give them the permissions to place scripts and executable programs in the folder. Executing these scripts and programs can cause unexpected behavior on the server.<\/li>\n<li>In order to avoid this, we can deny permissions to run scripts and executable files in the\u00a0upload\u00a0folder to prevent an uploaded file from being executed when a user attempts to download it.<\/li>\n<\/ul>\n<p>Below are the steps to deny both\u00a0Script\u00a0and\u00a0Execute\u00a0permissions for the upload folder,<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ol>\n<li>Open the Internet Information Services (IIS) Manager.<\/li>\n<li>Navigate to and click the upload folder for the relevant website, and then under the\u00a0IIS\u00a0section, double-click\u00a0Handler Mappings.<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-587\" src=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Secure-the-file-upload-functionality.png\" alt=\"Secure the file upload functionality\" width=\"671\" height=\"333\" \/><\/p>\n<ol>\n<li>In the\u00a0Actions\u00a0pane, click\u00a0Edit Feature Permissions.<\/li>\n<li>In the\u00a0Edit Feature Permissions\u00a0dialog box, clear the\u00a0Script\u00a0and\u00a0Execute\u00a0checkboxes and click\u00a0OK.<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-589\" src=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/the-Script-and-Execute-check-boxes.png\" alt=\"the Script and Execute check boxes\" width=\"1061\" height=\"511\" \/><\/li>\n<\/ol>\n<p><strong>Disable SQL Server access from XSLT<\/strong><\/p>\n<p>Sitecore includes an <strong>xslExtension<\/strong> helper for use with SQL Server. You can disable it either when we are not using it or not using Sitecore XSLT renderings.<\/p>\n<p>To disable the <strong>xslExtension<\/strong> helper:<\/p>\n<ol>\n<li>In the\u00a0App_Config\/Include\u00a0folder, create a patch file. Give it a file name that ends with the extension\u00a0.config.<\/li>\n<li>Insert the following code in the patch file:<\/li>\n<\/ol>\n<p>&lt;configuration xmlns:patch=&#8221;http:\/\/www.sitecore.net\/xmlconfig\/&#8221;&gt;<\/p>\n<p>&lt;sitecore&gt;<\/p>\n<p>&lt;!&#8211; disable XSLT security issue see https:\/\/doc.sitecore.net\/sitecore_experience_platform\/setting_up_and_maintaining\/security_hardening\/configuring\/disable_sql_server_access_from_xslt &#8211;&gt;<\/p>\n<p>&lt;xslExtensions&gt;<\/p>\n<p>&lt;extension type=&#8221;Sitecore.Xml.Xsl.SqlHelper, Sitecore.Kernel&#8221;&gt;<\/p>\n<p>&lt;patch:delete\/&gt;<\/p>\n<p>&lt;\/extension&gt;<\/p>\n<p>&lt;\/xslExtensions&gt;<\/p>\n<p>&lt;\/sitecore&gt;<\/p>\n<p>&lt;\/configuration&gt;<\/p>\n<p><strong>Secure Telerik controls<\/strong><\/p>\n<p>Sitecore uses some UI controls from Telerik. These controls are only used in a Content Management environment.<\/p>\n<ol>\n<li>In all non-Content Management environments, in the\u00a0web.config\u00a0file, remove the following nodes:<\/li>\n<\/ol>\n<p>&lt;add name=&#8221;Telerik_Web_UI_DialogHandler_aspx&#8221; verb=&#8221;*&#8221; preCondition=&#8221;integratedMode&#8221; path=&#8221;Telerik.Web.UI.DialogHandler.aspx&#8221; type=&#8221;Telerik.Web.UI.DialogHandler&#8221; \/&gt;<\/p>\n<p>&lt;add name=&#8221;Telerik_Web_UI_SpellCheckHandler_axd&#8221; verb=&#8221;*&#8221; preCondition=&#8221;integratedMode&#8221; path=&#8221;Telerik.Web.UI.SpellCheckHandler.axd&#8221; type=&#8221;Telerik.Web.UI.SpellCheckHandler&#8221; \/&gt;<\/p>\n<p>&lt;add name=&#8221;Telerik_Web_UI_WebResource_axd&#8221; verb=&#8221;*&#8221; preCondition=&#8221;integratedMode&#8221; path=&#8221;Telerik.Web.UI.WebResource.axd&#8221; type=&#8221;Telerik.Web.UI.WebResource&#8221; \/&gt;<\/p>\n<ol start=\"2\">\n<li>In a Content Management environment, you must configure the encryption key that is used to secure the Telerik upload control.<\/li>\n<\/ol>\n<p>In the\u00a0web.config\u00a0file, in the appSettings section, create a node for the Telerik configuration encryption keys:<\/p>\n<p>&lt;appSettings&gt;<\/p>\n<p>&lt;add key=&#8221;Telerik.AsyncUpload.ConfigurationEncryptionKey&#8221; value=&#8221;YOUR_ENCRYPTION_KEY_HERE&#8221; \/&gt;<\/p>\n<p>&lt;add key=&#8221;Telerik.Upload.ConfigurationHashKey&#8221; value=&#8221;YOUR_ENCRYPTION_KEY_HERE&#8221; \/&gt;<\/p>\n<p>&lt;add key=&#8221;Telerik.Web.UI.DialogParametersEncryptionKey&#8221; value=&#8221;YOUR_ENCRYPTION_KEY_HERE&#8221; \/&gt;<\/p>\n<p>&lt;\/appSettings&gt;<\/p>\n<p><strong>Limit access to certain file types<\/strong><\/p>\n<p>Sitecore recommends to improve the security of your Sitecore installation, edit the\u00a0web.config\u00a0file, and disable the\u00a0web.config\u00a0file with EXM settings.<\/p>\n<ol>\n<li>To limit access to XML, XSLT, and MRT files:<\/li>\n<li>Open web.config\u00a0file in the\u00a0Website\u00a0folder.<\/li>\n<li>In the\u00a0&lt;system.webServer&gt;&lt;handlers&gt;\u00a0section, add the following lines:<\/li>\n<\/ol>\n<p>&lt;system.webServer&gt;<\/p>\n<p>&lt;handlers&gt;<\/p>\n<p>&lt;add path=&#8221;*.xml&#8221; verb=&#8221;*&#8221; type=&#8221;System.Web.HttpForbiddenHandler&#8221; name=&#8221;xml (integrated)&#8221; preCondition=&#8221;integratedMode&#8221;\/&gt;<\/p>\n<p>&lt;add path=&#8221;*.xslt&#8221; verb=&#8221;*&#8221; type=&#8221;System.Web.HttpForbiddenHandler&#8221; name=&#8221;xslt (integrated)&#8221; preCondition=&#8221;integratedMode&#8221;\/&gt;<\/p>\n<p>&lt;add path=&#8221;*.config.xml&#8221; verb=&#8221;*&#8221; type=&#8221;System.Web.HttpForbiddenHandler&#8221; name=&#8221;config.xml (integrated)&#8221; preCondition=&#8221;integratedMode&#8221;\/&gt;<\/p>\n<p>&lt;add path=&#8221;*.mrt&#8221; verb=&#8221;*&#8221; type=&#8221;System.Web.HttpForbiddenHandler&#8221; name=&#8221;mrt (integrated)&#8221; preCondition=&#8221;integratedMode&#8221;\/&gt;<\/p>\n<p>This restricts access to all XML, XSLT, and MRT files.<\/p>\n<ol start=\"4\">\n<li>Disable the\u00a0web.config\u00a0file that has EXM settings. This is in the\u00a0\\sitecore modules\\Shell\\EmailCampaign\\\u00a0folder.<\/li>\n<\/ol>\n<p><strong>Protect PhantomJS<\/strong><\/p>\n<p><strong>PhantomJS<\/strong> is a third-party program is used to generate screenshots of web pages on the Sitecore CMS and EXM. We can improve the security around <strong>PhantomJS<\/strong> by limiting its permissions, and disabling it on roles where it is not needed.<\/p>\n<ol>\n<li>Move the\u00a0&lt;webroot&gt;\\App_Data\\tools\\phantomjs\\\u00a0folder to, for example,\u00a0C:\\phantomjs\\.<\/li>\n<li>Create a patch file named, for example,\u00a0MovePhantomJSFolder.config in &lt;webroot&gt;\\App_Config\\Include\\\u00a0folder,<\/li>\n<li>Insert the following configuration:<\/li>\n<\/ol>\n<p>Copy&lt;configuration xmlns:patch=&#8221;http:\/\/www.sitecore.net\/xmlconfig\/&#8221; xmlns:role=&#8221;http:\/\/www.sitecore.net\/xmlconfig\/role\/&#8221; xmlns:security=&#8221;http:\/\/www.sitecore.net\/xmlconfig\/security\/&#8221;&gt;<\/p>\n<p>&lt;sitecore&gt;<\/p>\n<p>&lt;setting name=&#8221;ContentTesting.PhantomJS.ExecutablePath&#8221; value=&#8221;C:\\phantomjs\\phantomjs.exe&#8221; \/&gt;<\/p>\n<p>&lt;\/sitecore&gt;<\/p>\n<p>&lt;\/configuration&gt;<\/p>\n<ol start=\"4\">\n<li>Save the patch file.<\/li>\n<\/ol>\n<p><strong>Protect media requests<\/strong><\/p>\n<p>The media request protection feature is used to restrict the media URLs that contain dynamic image-scaling parameters. This ensures that the server only spends resources and disk space on valid image-scaling requests.<\/p>\n<p>You can make your solution even more secure and use the Sitecore media request protection feature optimally if you patch the\u00a0Sitecore.Media.RequestProtection.config\u00a0file.<\/p>\n<p>To optimize the media request protection feature:<\/p>\n<ol>\n<li>Create a patch file MediaRequestProtectionCustom.config in In the\u00a0App_Config\\Include\\\u00a0folder.<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>Insert the following code:<\/li>\n<\/ol>\n<p>&lt;configuration\u00a0xmlns:patch=&#8221;http:\/\/www.sitecore.net\/xmlconfig\/&#8221;&gt;<\/p>\n<p>&lt;sitecore&gt;<\/p>\n<p>&lt;settings&gt;<\/p>\n<p>&lt;setting\u00a0 name=&#8221;Media.RequestProtection.SharedSecret&#8221; value=&#8221;YourRandomGeneratedString&#8221;\/&gt;<\/p>\n<p>&lt;\/settings&gt;<\/p>\n<p>&lt;\/sitecore&gt;<\/p>\n<p>&lt;\/configuration&gt;<\/p>\n<ol start=\"3\">\n<li>Save the patch file.<\/li>\n<\/ol>\n<p><strong>Remove header information from responses sent by your website<\/strong><\/p>\n<p>By removing the X-Aspnet-Version HTTP header information from each web page, it will save a little bandwidth and also ensures that we are not broadcasting which version of ASP.NET using. To remove the X-Aspnet-Version HTTP header from each response from ASP.NET, add the following code to the\u00a0web.config\u00a0file.<\/p>\n<p><em>&lt;system.web&gt;<\/em><\/p>\n<p><em>\u00a0 &lt;httpRuntime enableVersionHeader=&#8221;false&#8221; \/&gt;<\/em><\/p>\n<p><em>&lt;\/system.web&gt;<\/em><\/p>\n<p>By removing the X-Powered-By HTTP header, we are not broadcasting which version of ASP.NET using. To remove the X-Powered-By HTTP header from each response from ASP.NET, add the following code to the\u00a0web.config\u00a0file:<\/p>\n<p><em>&lt;system.webServer&gt;<\/em><\/p>\n<p><em>\u00a0 &lt;httpProtocol&gt;<\/em><\/p>\n<p><em>\u00a0\u00a0\u00a0 &lt;customHeaders&gt;<\/em><\/p>\n<p><em>\u00a0\u00a0\u00a0\u00a0\u00a0 &lt;remove name=&#8221;X-Powered-By&#8221; \/&gt;<\/em><\/p>\n<p><em>\u00a0\u00a0\u00a0 &lt;\/customHeaders&gt;<\/em><\/p>\n<p><em>\u00a0 &lt;\/httpProtocol&gt;<\/em><\/p>\n<p><em>&lt;\/system.webServer&gt;<\/em><\/p>\n<h3><em>Sitecore 9.x Security Hardening | <a href=\"http:\/\/www.skybridgeinfotech.com\/site-core.html\" target=\"_blank\" rel=\"noopener\">Sitecore CMS Development Company in USA India<\/a><\/em><\/h3>\n<p><strong>Author:<\/strong> Prabhu Ranganathan, Sitecore Specialist<\/p>\n<style>.tb_button {padding:1px;cursor:pointer;border-right: 1px solid #8b8b8b;border-left: 1px solid #FFF;border-bottom: 1px solid #fff;}.tb_button.hover {borer:2px outset #def; background-color: #f8f8f8 !important;}.ws_toolbar {z-index:100000} .ws_toolbar .ws_tb_btn {cursor:pointer;border:1px solid #555;padding:3px}   .tb_highlight{background-color:yellow} .tb_hide {visibility:hidden} .ws_toolbar img {padding:2px;margin:0px}<\/style>\n","protected":false},"excerpt":{"rendered":"<p>Sitecore 9.x Security Hardening Whenever we have a website that has accessibility to everyone, maintaining security will be an important [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":586,"comment_status":"open","ping_status":"open","sticky":false,"template":"blog-details.php","format":"standard","meta":{"_acf_changed":false,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[16,30],"tags":[632,633,410,254,48,474,634,635,636,59,637],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\r\n<title>Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India - Skybridge<\/title>\r\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\r\n<link rel=\"canonical\" href=\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/\" \/>\r\n<meta property=\"og:locale\" content=\"en_US\" \/>\r\n<meta property=\"og:type\" content=\"article\" \/>\r\n<meta property=\"og:title\" content=\"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India - Skybridge\" \/>\r\n<meta property=\"og:description\" content=\"Sitecore 9.x Security Hardening Whenever we have a website that has accessibility to everyone, maintaining security will be an important [&hellip;]\" \/>\r\n<meta property=\"og:url\" content=\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/\" \/>\r\n<meta property=\"og:site_name\" content=\"Skybridge\" \/>\r\n<meta property=\"article:published_time\" content=\"2021-07-14T07:44:44+00:00\" \/>\r\n<meta property=\"article:modified_time\" content=\"2024-11-13T06:06:58+00:00\" \/>\r\n<meta property=\"og:image\" content=\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg\" \/>\r\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\r\n\t<meta property=\"og:image:height\" content=\"800\" \/>\r\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\r\n<meta name=\"author\" content=\"admin\" \/>\r\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\r\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\r\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc\"},\"headline\":\"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India\",\"datePublished\":\"2021-07-14T07:44:44+00:00\",\"dateModified\":\"2024-11-13T06:06:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/\"},\"wordCount\":1554,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg\",\"keywords\":[\"Protect media requests in Sitecore\",\"Sitecore 9.x Security Hardening\",\"sitecore cms development service\",\"Sitecore CMS Implementation\",\"sitecore development company\",\"sitecore development service\",\"sitecore Implementation company\",\"sitecore Implementation service\",\"Sitecore Secure Telerik controls\",\"Sitecore solution partner\",\"Web security in Sitecore\"],\"articleSection\":[\"Sitecore\",\"Sitecore CMS\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/\",\"name\":\"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India - Skybridge\",\"isPartOf\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg\",\"datePublished\":\"2021-07-14T07:44:44+00:00\",\"dateModified\":\"2024-11-13T06:06:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg\",\"contentUrl\":\"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg\",\"width\":1200,\"height\":800,\"caption\":\"Sitecore 9.x Security Hardening\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.skybridgeinfotech.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#website\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/\",\"name\":\"Skybridge\",\"description\":\"Skybridge\",\"publisher\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.skybridgeinfotech.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#organization\",\"name\":\"Skybridge\",\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png\",\"contentUrl\":\"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png\",\"width\":197,\"height\":73,\"caption\":\"Skybridge\"},\"image\":{\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/www.skybridgeinfotech.com\/blog\"],\"url\":\"https:\/\/www.skybridgeinfotech.com\/blog\/author\/admin\/\"}]}<\/script>\r\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India - Skybridge","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/","og_locale":"en_US","og_type":"article","og_title":"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India - Skybridge","og_description":"Sitecore 9.x Security Hardening Whenever we have a website that has accessibility to everyone, maintaining security will be an important [&hellip;]","og_url":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/","og_site_name":"Skybridge","article_published_time":"2021-07-14T07:44:44+00:00","article_modified_time":"2024-11-13T06:06:58+00:00","og_image":[{"width":1200,"height":800,"url":"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#article","isPartOf":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/"},"author":{"name":"admin","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc"},"headline":"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India","datePublished":"2021-07-14T07:44:44+00:00","dateModified":"2024-11-13T06:06:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/"},"wordCount":1554,"commentCount":0,"publisher":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage"},"thumbnailUrl":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg","keywords":["Protect media requests in Sitecore","Sitecore 9.x Security Hardening","sitecore cms development service","Sitecore CMS Implementation","sitecore development company","sitecore development service","sitecore Implementation company","sitecore Implementation service","Sitecore Secure Telerik controls","Sitecore solution partner","Web security in Sitecore"],"articleSection":["Sitecore","Sitecore CMS"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/","url":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/","name":"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India - Skybridge","isPartOf":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage"},"image":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage"},"thumbnailUrl":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg","datePublished":"2021-07-14T07:44:44+00:00","dateModified":"2024-11-13T06:06:58+00:00","breadcrumb":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#primaryimage","url":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg","contentUrl":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2021\/07\/Sitecore-9.x-Security-Hardening-1.jpg","width":1200,"height":800,"caption":"Sitecore 9.x Security Hardening"},{"@type":"BreadcrumbList","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/sitecore-9-x-security-hardening-sitecore-cms-development-company-in-usa-india\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.skybridgeinfotech.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Sitecore 9.x Security Hardening | Sitecore CMS Development Company in USA India"}]},{"@type":"WebSite","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#website","url":"https:\/\/www.skybridgeinfotech.com\/blog\/","name":"Skybridge","description":"Skybridge","publisher":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.skybridgeinfotech.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#organization","name":"Skybridge","url":"https:\/\/www.skybridgeinfotech.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/","url":"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png","contentUrl":"http:\/\/www.skybridgeinfotech.com\/blog\/wp-content\/uploads\/2024\/02\/logo.png","width":197,"height":73,"caption":"Skybridge"},"image":{"@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/0f15f3349a8eea9f6c89ae7dac0f3cbc","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skybridgeinfotech.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/118323199c026a712094dacfeb0b28dc?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/www.skybridgeinfotech.com\/blog"],"url":"https:\/\/www.skybridgeinfotech.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts\/585"}],"collection":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/comments?post=585"}],"version-history":[{"count":1,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts\/585\/revisions"}],"predecessor-version":[{"id":2994,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/posts\/585\/revisions\/2994"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/media\/586"}],"wp:attachment":[{"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/media?parent=585"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/categories?post=585"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skybridgeinfotech.com\/blog\/wp-json\/wp\/v2\/tags?post=585"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}