Enable TLS 1.2 strong cipher suites (2024)

', /* Component button to preferences dialog (i.e. layout) */ "animateRevokable": "false", "compliance": { /* Wrapper around component buttons, used by layouts. "type" determines which is used. */ "info": '

{{dismiss}}{{link}}

', "opt-in": '

{{deny}}{{allow}}{{link}}

', "opt-out": '

{{deny}}{{allow}}{{link}}

', }, "layouts": { /* Custom layouts used by "layout" setting. Variations if header/close setting is enabled... Override defaults below -----v */ "basic-layout": '{{message}}{{compliance}}', 'basic-layout-close': '{{message}}{{compliance}}{{close}}', 'basic-layout-header': '{{header}}{{message}}{{link}}{{compliance}}', "trend-micro-privacy-consent-layout": '{{message}}{{compliance}}', 'trend-micro-privacy-consent-layout-close': '{{message}}{{compliance}}{{close}}', 'trend-micro-privacy-consent-layout-header': '{{header}}{{message}}{{compliance}}' }, "layout": "trend-micro-privacy-consent-layout", "cookie": { "name": _telemetryCookiePrefName, "domain": location.hostname, "secure": _telemetryCookieSecure, "expiryDays": _telemetryCookieExpiry } }); /* Initialize telemetry scripts if it's not localhost/dev, and consent has not been withdrawn*/ if ( dsGetCookie(_telemetryCookiePrefName ) !== 'deny') { /* Google Analytics */ window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date; ga('create', { trackingId: _telemetryIds.google, cookieDomain: location.hostname, cookieExpires: _telemetryCookieExpiry * 24 * 60 * 60 /* Measured in seconds */ }); ga('set', 'referrer', 'http://example.com'); /* Prevent collecting personal data from 3rd party URLs */ ga('set', 'anonymizeIp', true); /* Last octet of IPv4 address obscured so location is approximate */ ga('send', 'pageview'); /* End Google Analytics */ /* Hotjar */ (function(h,o,t,j,a,r){ h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)}; h._hjSettings={hjid:_telemetryIds.hotjar,hjsv:6}; a=o.getElementsByTagName('head')[0]; r=o.createElement('script');r.async=1; r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv; a.appendChild(r); })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv='); hj.optOut = false; /* Opt-out for all sites, including 3rd party. Otherwise even if they explicitly agree to our cookie, it wouldn't work. */ /* Cookie expiry, referrer and IP anonymization not configurable in their API. */ /* End HotJar */ } } /* PRIVILEGED METHODS */ this.init = function() { _init(); } } /* GLOBAL METHODS */ /** * Is this page on a local file system (e.g. file:///C:/index.html) or developer's laptop (e.g. https://localhost/index.html)? * * *hostnamePage's "location.hostname" part of the URL (if any). Empty if it's a local file system, not a web server with a hostname. */ function dsIsHostLocal ( hostname = location.hostname ) { /* Domain name doesn't always exist in URL if we're on a local file system (file:/// not https://). So check for empty string first. Otherwise check standard RFC 1918 private IPv4/IPv6 address for localhost. */ if (!hostname || hostname === '' || hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '::1') { return true; } else { return false; } } /** * Is this page on an internal server? * * Useful for dark launch. * * NOTE: By default, returns true (i.e. "No, it's not public/production"). * This safety keeps prod telemetry data "clean" and internal features hidden. * if new dev/QA environments are spun up. But if production gets a new DNS/domain name, * you MUST update the "dsHostnames" config. Otherwise all dark launch flags will be disabled. * *hostnameHTTP "Host:", if any, in the URL. Empty if URL starts with 'file:///', which is a local file system, not a proper web server. */ function dsIsHostInternal ( hostname = location.hostname ) { /* Dev or Staging */ if ( dsIsHostLocal(hostname) || hostname === dsHostnames.dev || hostname === dsHostnames.staging ) { return true; } else { /* Prod */ if (hostname === dsHostnames.prod) { return false; } else { /* Unknown * To avoid showing unreleased features, don't just assume this is a new hostname for prod. * But this might be the wrong result, so log it. */ console.warn('Domain name in HTTP \'Host: %s\' was not recognized. If this is a new hostname, update the settings.', hostname); return true; } } } /** * Is input safe-ish to use? * * NOTE: Does NOT fully validate. Just flags if input is too long, or if there are chars that could be XSS, SQLi, etc. attack. * After using this function, you should then validate input is "normal" according to your specific context: * data types, range, bindings, etc. expected by the function's logic. * *inputString from an arg, parameter, cookie, URL query string, etc. *allowedSpecialCharsArray of characters that are usually illegal, but must be allowed for this specific input type (Example: '?' in query string or '\' in Unicode cookies) *maxLengthInteger of maximum input string length to avoid buffer overflows and DoS attacks */ function dsIsInputSane ( input = '', allowedSpecialChars = [''], maxLength = 64 ) { var _alphanumeric = /^[0-9a-z]+$/i ; // Regex /* Validate passed parameters' data types before we use string- or array-specific methods. */ if ( !input || typeof( input ) !== 'string' || input == '' ) { console.error('Input %s "%s" is not a valid string. Ignoring input.', typeof(input), input.toString()); return false; } if ( !allowedSpecialChars || !(Array.isArray(allowedSpecialChars)) || allowedSpecialChars.length < 1 ) { console.error('Allowed special characters %s "%s" is not a valid varray. Ignoring input.', typeof(allowedSpecialChars), allowedSpecialChars.toString()); return false; } else { for (i = 0; i < allowedSpecialChars.length; i++) { if (typeof(allowedSpecialChars[i]) !== 'string') { console.error('Allowed special characters array contains an element %s "%s" that is not a string. Ignoring input.', typeof(allowedSpecialChars[i]), allowedSpecialChars[i].toString()); return false; } } } if ( !maxLength || (typeof( maxLength ) !== 'number') ) { console.error('Maximum length %s "%s" is not a valid number. Ignoring input.', typeof(maxLength), maxLength.toString()); return false; } /* Don't bother inspecting the string's chars if it's insanely long. */ if ( input.length >= maxLength ) { console.error('Input is too long: %d. Ignoring input.', input.length); return false; } else { /* Look for non-alphanumeric characters. Allow special characters only if specifically listed.*/ for (i = 0; i < input.length; i++) { if (!( allowedSpecialChars.includes(input.charAt(i)) || input.charAt(i).match(_alphanumeric) )) { console.error('Input "%s" is not sane. Ignoring input.', input.toString()); return false; } else { if (i === (input.length - 1)) { /* We reached the end of the string, so input was basically sane. */ return true; } } } } } /** * Get cookie's value string, if it exists, is accessible, and sane * Returns exception otherwise * *cookieNameName of a cookie *allowedSpecialCharsArray of special characters, if any, that must be allowed for the cookie name and value (Example: '\' in Unicode cookies or '{' in JSON) *maxLengthInteger of maximum string length for the cookie name and value */ function dsGetCookie ( cookieName = '', allowedSpecialChars = [''], maxLength = 64 ) { /* Check the name */ if ( !dsIsInputSane( cookieName, allowedSpecialChars, maxLength ) ) { return ''; } else { cookieValue = Cookies.get( cookieName ); /* Check the value */ if ( !cookieValue ) { /* Non-existent cookie could be the user clearing their cookies normally or a privacy plugin, not something dangerous */ console.debug('Cookie "%s" did not exist or access was not permitted. Getting value failed.', cookieName.toString()); return ''; } else { if ( !dsIsInputSane( cookieValue, allowedSpecialChars, maxLength ) ) { return ''; } else { return cookieValue; } } } } /** * Set cookie's value string, if sane and accessible * Returns true if successful, or false otherwise * *cookieNameName of a cookie *cookieValueString value of a cookie *allowedSpecialCharsArray of special characters, if any, that must be allowed for the cookie name and value (Example: '\' in Unicode cookies or '{' in JSON) *maxLengthInteger of maximum string length for the cookie name and value */ function dsSetCookie ( cookieName = '', cookieValue = '', cookiePath = '', cookieExpiry = 14, allowedSpecialChars = [''], maxLength = 64 ) { /* Check the name */ if ( !dsIsInputSane( cookieName, allowedSpecialChars, maxLength ) ) { } else { /* Check the value */ if ( !dsIsInputSane( cookieValue, allowedSpecialChars, maxLength ) ) { } else { if ( !Cookies.set( cookieName, cookieValue, {expires: cookieExpiry, path: cookiePath} ) ) { /* Might fail due to a privacy plugin, not something dangerous */ console.debug('Cookie "%s" did not exist or access was not permitted. Getting value failed.', cookieName.toString()); } else { return true; } } } return false; } /** * Delete cookie, if allowed * Returns void * *cookieNameName of a cookie *cookiePathSub-URL scope of a cookie *allowedSpecialCharsArray of special characters, if any, that must be allowed for the cookie name and value (Example: '\' in Unicode cookies or '{' in JSON) */ function dsDeleteCookie ( cookieName, cookiePath = '', allowedSpecialChars = [''] ) { /* Check the name */ if ( !dsIsInputSane( cookieName, allowedSpecialChars ) ) { } else { if ( !Cookies.get( cookieName ) ) { /* Non-existent cookie could be the user clearing their cookies normally or a privacy plugin, not something dangerous */ console.debug('Cookie "%s" did not exist or access was not permitted. Delete failed.', cookieName.toString()); } else { /* Set the cookie's expiry to delete itself */ /* js-cookie returns nothing regardless of result, so for now, we can't pass anything definite */ Cookies.remove( cookieName, {path: cookiePath} ); } } } /* Once the page is loaded, instantiate the telemetry consent dialog and tracker(s). */ window.addEventListener("load", function(){ /* Use different tracking unique IDs for Prod vs. Staging (Keeps telemetry data cleaner.) */ var dsTelemetryIds; if (location.hostname === dsHostnames.staging) { dsTelemetryIds = { google: 'UA-67585200-4', hotjar: '1566888' } } else if (location.hostname === dsHostnames.prod) { dsTelemetryIds = { google: 'UA-67585200-1', hotjar: '1419268' }; } else if ( location.hostname === dsHostnames.dev || location.hostname.endsWith("trendnet.org") || dsIsHostLocal(location.hostname)) { // dev... Don't track: No unique IDs, or requires internal DNS resolution, or events could come from DHCP-recylced IP addresses dsTelemetryIds = { google: '', hotjar: '' }; console.debug('Telemetry won\'t function because domain name in HTTP \'Host: %s\' is a local or dev environment. Requires staging or production hostname, which have telemetry unique IDs.', location.hostname); } else { // Equivalent to unrecognized by dsIsHostInternal() console.warn('Domain name in HTTP \'Host: %s\' was not recognized. If this is a new hostname, update the settings.', location.hostname); } console.debug(dsTelemetryIds); var dsTelemetry = new DS_TELEMETRY( dialogAlignment = 'bottom', containterElement = document.getElementById(dsSiteFooterId), telemetryIds = dsTelemetryIds, cookieName = 'dsCookiesPref'); if ( !dsIsHostLocal() ) { dsTelemetry.init(); /* ... then automatically minimizes the dialog if "cookieName" proves we've asked before. */ } }); /*]]>*/