Disable Scripting in On-Premises Reporting

Scripting is available in on-premises installations of Geocortex Reporting only. Scripting is not available in cloud Reporting.

Scripting allows report authors to write code that executes on your server. This can represent a security vulnerability if your report authors are not trusted.

Scripting is enabled by default in on-premises Reporting. You can disable it if you want.

To disable scripting in on-premises Reporting:

  1. Edit the following web.config file as an administrator:

    [installation_location]\Geocortex Reporting\Deployment\web.config

    If you installed Geocortex Reporting in the default location, the web.config file is here:

    C:\Program Files\Latitude Geographics\Geocortex Reporting\Deployment\web.config

  2. In <appSettings>, find this line:

    <add key="app:allowScripts" value="true" />

  3. Set value to false.

    The line should look like this:

    <add key="app:allowScripts" value="false" />

  4. Save the file.

    Scripting is now disabled.

See also...

Use Scripts in Reports

© 2019 Latitude Geographics Group Ltd. All Rights Reserved.

Documentation Version 5.2