This commit is contained in:
Nikolay Iliev 2021-05-03 15:09:04 +03:00
Родитель 3157f403f1
Коммит 72ae33f608
3 изменённых файлов: 13 добавлений и 12 удалений

Просмотреть файл

@ -53,7 +53,7 @@ Capturing all outgoing and incoming traffic for the current tab might expose sen
Learn more about:
- What is the [Fiddler Jam portal]({%slug fj-portal%}).
- What is a [Fiddler Jam portal user]({%slug fj-users%}#portal-users) and how to become one.
- What is the difference between [Fiddler Jam portal user]({%slug fj-users%}#user-role), [Fiddler Jam portal viewer]({%slug fj-users%}#viewer-role) and how to become one.
- How to [work with submitted logs in the Fiddler Jam portal]({%slug fj-portal-logs%}).
- How to [organize received logs into portal workspaces]({%slug fj-workspaces%})
- How to [use the Fiddler Everywhere desktop application for deep-dive investigation of Jam logs]({%slug fj-advanced-analysis%}).

Просмотреть файл

@ -17,14 +17,13 @@ The [Fiddler Jam portal](https://jam.getfiddler.com) is the cloud space where lo
The Fiddler Jam login accepts using custom credentials or Google authentication, but the portal will be accessible only for usernames/emails that are part of an active subscription. Depending on the user assigned role, the Fiddler Jam portal will provide a different level of accessibility and features as follows:
- Unregistered users won't be able to open the Fiddler Jam portal or load generated Fiddler Jam links. Note that no registration is needed to use the Fiddler Jam Chrome extension.
- Registered users with the **viewer** role can see only logs [added to a workspace]({%slug fj-workspaces%}#add-submitted-log-to-workspace). If a viewer opens a public link, a page will inform the user that the links need to be added to the account workspace.
- Registered users with the **agent** role can open public logs, create and manage workspaces, manage existing logs (manage, add and remove from workspaces).
- Fiddler Jam portal seats with the **viewer** role can see only logs [added to a workspace]({%slug fj-workspaces%}#add-submitted-log-to-workspace). If a viewer opens a public link, a page will inform the user that the links need to be added to the account workspace.
- Fiddler Jam portal seats with the **user** role can open public logs, create and manage workspaces, manage existing logs (manage, add and remove from workspaces).
Learn more about :
- [The Fiddler Jam **extension users**]({%slug fj-users%}#extension-users)
- [The Fiddler Jam **portal users**]({%slug fj-users%}#portal-users)
- [The portal users with **Viewer** role]({%slug fj-users%}#viewer-role)
- [The portal users with **Agent** role]({%slug fj-users%}#agent-role)
- [The Fiddler Jam portal seats with **Viewer** role]({%slug fj-users%}#viewer-role)
- [The Fiddler Jam portal seats with **User** role]({%slug fj-users%}#user-role)
## Using Submitted Logs

Просмотреть файл

@ -25,20 +25,22 @@ Fiddler Jam is a Chrome extension tool that can capture the ongoing tab activity
The **Capture Options** menu provides some useful functionalities to will be applied during the capturing. Before you record a log, consider the following security concerns.
- **Screenshots** - This option will add a screenshot of your initial action from the active Chrome tab. Before you record a log, consider disabling the screenshot option if your screen shows sensitive data. **Turned ON by default**.
- **Take screenshots while capturing** - This option will add a screenshot of your initial action from the active Chrome tab. Before you record a log, consider disabling the screenshot option if your screen shows sensitive data. **Turned ON by default**.
- **Capture console** - This option will include any developers console outputs in the recorded log. Before you record a log, consider disabling this functionality if your console logs contain sensitive information. **Turned ON by default**.
- **Masking Cookies** - When active, this option masks all cookies values (cookie key names are still readable!) so that they won't be visible to the agents receiving the log. **Turned ON by default**.
- **Mask cookies** - When active, this option masks all cookies values (cookie key names are still readable!) so that they won't be visible to the portal users receiving the log. **Turned ON by default**.
- **Capture Post Data** - This option captures the user's information in text inputs and forms. That might include sensitive information like usernames, personal information, etc. **Turned OFF by default**.
- **Mask post data** - This option captures the user's information in text inputs and forms. That might include sensitive information like usernames, personal information, etc. **Turned ON by default**.
- **Disable cache** - This option sets the `Cache-Control` and `Pragma` headers to **no-cache** value on each network request. **Turned ON by default**.
## Sharing Links
Once [a log is recorded]({%slug fj-recording-logs%}), the Fiddler Jam extension generates a unique link. The logs are distributed as HAR files.
- For logs generated with **Anyone with this link** option: Any [Fiddler Jam portal agent]({%slug fj-portal%}) could open the link.
- For logs generated with **Share as link** option: Any [Fiddler Jam portal users and viewers]({%slug fj-portal%}) could open the link.
- For logs generated with **Anyone with link and password** option: Only [Fiddler Jam portal agent]({%slug fj-portal%}) that knows the password could open the link. The logs are distributed as HAR files, which are encrypted with the AES-CTR encryption algorithm.
- For logs generated with **Share with specific people** options: Only [Fiddler Jam portal users and viewers]({%slug fj-portal%}) that is explicitly included in the share list will be able to open the link.
- For logs generated with **Share with specific people** options: Only [Fiddler Jam portal agent]({%slug fj-portal%}) that is explicitly included in the share list will be able to open the link.
- For logs generated with **Password protection** option: Only [Fiddler Jam portal users and viewers]({%slug fj-portal%}) that knows the password could open the link. The logs are distributed as HAR files, which are encrypted with the AES-CTR encryption algorithm.