[dubbo-website] branch master updated: Translate security notices to english (#2825)

[al...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

albumenj pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-website.git


The following commit(s) were added to refs/heads/master by this push:
     new 01626b85c5f Translate security notices to english (#2825)
01626b85c5f is described below

commit 01626b85c5f44c6f461d80a31ee873b27c451455
Author: namelessssssssssss <10...@users.noreply.github.com>
AuthorDate: Fri Oct 13 17:38:36 2023 +0800

    Translate security notices to english (#2825)
    
    * Translate security notices to english.
    
    * Merge master branch
    
    * Fix path
---
 content/en/blog/security-notices/_index.md                |  9 +++++++++
 .../{docs/notices => blog/security-notices}/security.md   |  0
 .../en/blog/security-notices/serialization-security.md    | 15 +++++++++++++++
 content/en/docs/notices/_index.md                         |  9 ---------
 4 files changed, 24 insertions(+), 9 deletions(-)

diff --git a/content/en/blog/security-notices/_index.md b/content/en/blog/security-notices/_index.md
new file mode 100644
index 00000000000..494cef2bc95
--- /dev/null
+++ b/content/en/blog/security-notices/_index.md
@@ -0,0 +1,9 @@
+
+---
+type: docs
+title: "Security notices"
+linkTitle: "Security notices"
+description: "Dubbo security notices"
+weight: 90
+---
+
diff --git a/content/en/docs/notices/security.md b/content/en/blog/security-notices/security.md
old mode 100755
new mode 100644
similarity index 100%
rename from content/en/docs/notices/security.md
rename to content/en/blog/security-notices/security.md
diff --git a/content/en/blog/security-notices/serialization-security.md b/content/en/blog/security-notices/serialization-security.md
new file mode 100644
index 00000000000..9ceb812207c
--- /dev/null
+++ b/content/en/blog/security-notices/serialization-security.md
@@ -0,0 +1,15 @@
+---
+title: "Serialization Protocol Security"
+linkTitle: "Serialization Protocol Security"
+weight: 1
+tags: ["Security Vulnerabilities"]
+description: "Safer use of serialization protocols in Dubbo"
+---
+
+Dubbo 3.0 has enhanced the security aspects of serialization protocols and recommends using the Triple protocol in non-Wrapper mode. This protocol is secure by default but requires developers to write IDL files.
+
+In the Triple protocol's Wrapper mode, compatibility with other serialization data is allowed, offering good compatibility. However, other protocols may have deserialization security flaws. For the Hessian2 protocol, users who require high-security attributes should enable whitelist mode according to the sample code. The framework will enable blacklist mode by default to block malicious calls.
+
+Using other serialization protocols is not recommended. When an attacker can access the Provider interface, security flaws in other serialization protocols may lead to command execution through the Provider interface.
+
+If you must use other serialization protocols and wish to maintain some level of security, you should enable the Token authentication mechanism. This will prevent threats to the Provider's security from unauthenticated and untrusted request sources. When enabling Token authentication, you should also enable the authentication feature in the registry.
\ No newline at end of file
diff --git a/content/en/docs/notices/_index.md b/content/en/docs/notices/_index.md
deleted file mode 100755
index a9a433305c4..00000000000
--- a/content/en/docs/notices/_index.md
+++ /dev/null
@@ -1,9 +0,0 @@
-
----
-type: docs
-title: "Notices"
-linkTitle: "Notices"
-description: "Dubbo notices"
-weight: 90
----
-