| ... |
... |
@@ -1,3 +1,5 @@ |
|
1 |
+{{include reference="PublicWebSite.MacrosAndVariables" /}} |
|
2 |
+ |
| 1 |
1 |
{{velocity}} |
| 2 |
2 |
#set ($discard = $xwiki.ssx.use('PublicWebSite.WebHome')) |
| 3 |
3 |
{{html clean="false"}} |
| ... |
... |
@@ -12,11 +12,21 @@ |
| 12 |
12 |
<p class="lead"> |
| 13 |
13 |
Practical articles for teams that want to keep XWiki secure, upgradeable and easier to maintain over time. |
| 14 |
14 |
</p> |
|
17 |
+ <div class="hero-actions"> |
|
18 |
+ <a class="btn btn-primary" href="$freeXWikiReviewCallURL">$freeXWikiReviewCallLabel</a> |
|
19 |
+ <a class="btn btn-secondary" href="$xwiki.getURL('services.WebHome')">View XWiki services</a> |
|
20 |
+ </div> |
| 15 |
15 |
</div> |
| 16 |
16 |
</section> |
| 17 |
17 |
## RESOURCE CARDS |
| 18 |
18 |
#set ($resourceItems = [{ |
| 19 |
|
- 'title': 'Why upgrade your XWiki instance?', |
|
25 |
+ 'title': 'What should an XWiki security review include', |
|
26 |
+ 'icon': 'shield', |
|
27 |
+ 'url': 'resources.xwiki-security-review', |
|
28 |
+ 'content': 'A practical overview of what to review in an XWiki instance: version status, access rights, authentication, extensions, custom code, infrastructure, backups and operations.', |
|
29 |
+ 'linkLabel': 'Read article' |
|
30 |
+ },{ |
|
31 |
+ 'title': 'Why upgrade your XWiki instance', |
| 20 |
20 |
'icon': 'refresh', |
| 21 |
21 |
'url': 'resources.why-upgrade-xwiki', |
| 22 |
22 |
'content': 'A practical explanation of why regular XWiki upgrades matter for security, stability, extension compatibility and long-term maintenance.', |
| ... |
... |
@@ -55,14 +55,14 @@ |
| 55 |
55 |
</section> |
| 56 |
56 |
## UPCOMING TOPICS |
| 57 |
57 |
#set ($upcomingTopicItems = [{ |
| 58 |
|
- 'title': 'Upgrade planning', |
| 59 |
|
- 'content': 'How to prepare XWiki upgrades when custom code, extensions, authentication and workflows are involved.' |
|
70 |
+ 'title': 'Access rights governance', |
|
71 |
+ 'content': 'How to keep XWiki groups, inherited permissions, restricted areas and page-level exceptions understandable over time.' |
| 60 |
60 |
},{ |
| 61 |
|
- 'title': 'Access and security', |
| 62 |
|
- 'content': 'Practical notes on permissions, authentication options, MFA, SSO and security-aware administration.' |
|
73 |
+ 'title': 'Authentication and access control', |
|
74 |
+ 'content': 'Why SSO, LDAP, OIDC, SAML and MFA should be reviewed together with XWiki groups, rights and fallback access.' |
| 63 |
63 |
},{ |
| 64 |
|
- 'title': 'Maintainable customization', |
| 65 |
|
- 'content': 'How to extend XWiki without creating unnecessary upgrade and maintenance problems.' |
|
76 |
+ 'title': 'Backup and restore validation', |
|
77 |
+ 'content': 'Why backups are only useful when restore expectations, included data and recovery steps are clearly understood.' |
| 66 |
66 |
}]) |
| 67 |
67 |
<section class="split-section" aria-labelledby="upcoming-title"> |
| 68 |
68 |
<div class="container"> |
| ... |
... |
@@ -70,8 +70,8 @@ |
| 70 |
70 |
<div class="split-copy"> |
| 71 |
71 |
<h2 id="upcoming-title">More practical XWiki topics coming soon</h2> |
| 72 |
72 |
<p> |
| 73 |
|
- Future resources will cover XWiki access rights, authentication, migrations, security reviews, |
| 74 |
|
- structured applications, workflows and practical administration patterns. |
|
85 |
+ This section will expand the XWiki security review series with focused topics such as access rights, |
|
86 |
+ authentication, script and programming rights, backup validation, extension review and operational practices. |
| 75 |
75 |
</p> |
| 76 |
76 |
<p> |
| 77 |
77 |
The goal is to publish useful guidance that helps teams make better decisions before an upgrade, |
