1.5 Security Considerations

This section describes security considerations you should be aware of when working with the reporting module.

1.5.1 Authentication Token Exposure

On Windows, the authentication token used for login operations is exposed as a URL parameter in Internet Explorer’s address bar when the user opens a PDF file for a report. This happens because a link to a PDF file is handled by the browser, not by JavaScript.

Although you might want to copy and paste the link to a report PDF, you should not do this. If the token has not yet expired and the user has not logged out, the receiver of the link, who might not be a legitimate user, is able to access the reporting module by using the token given to the legitimate user.

IMPORTANT:Do not try to copy and send links within the reporting module, because this action might potentially expose your login information.