Table of Contents
23 Upgrade notes for 3.0.13
More secure Áú»¢¶Ä²© setup
Several features have been implemented as part of an effort to "harden" the Áú»¢¶Ä²© web interface:
- Same origin policy for IFrames. Áú»¢¶Ä²© now cannot be placed in frames on a different domain. Still, pages placed into a Áú»¢¶Ä²© frame will have access to Áú»¢¶Ä²© frontend (through JavaScript) if the page that is placed in the frame and Áú»¢¶Ä²© frontend are on the same domain. A page like
http://secure-zabbix.com/cms/page.html, if placed into screens onhttp://secure-zabbix.com/zabbix/, will have full JS access to Áú»¢¶Ä²©. - Technical errors (PHP/SQL) are now hidden by default from non-Áú»¢¶Ä²© Super admin users and from users that are not part of user groups with debug mode enabled. This is configurable via the new ZBX_SHOW_TECHNICAL_ERRORS constant, set to 'false' by default.
Item changes
- system.cpu.num agent item on AIX now returns a value based on the logical processors attached to an AIX LPAR and not the physical ones.