Http to Https redirect in web app
How to get http to redirect to https in the web app. Open appsettings.json in the root folder (not api or auth). Add "httpsonly":true like in the below; Restart the site. Now when browsing to the http version it will be replaced with the https version.
CVE-2023-44487 – HTTP/2 Rapid Reset Attack and the Halo Hosted Platform
The Vulnerability The official statement from NIST is available HERE The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. How this affects Halo This vulnerability exists in the HTTP/2 protocol and is not specific to […]
CVE-2024-6200 – Stored Cross-Site Scripting in Tickets
General Information This article contains frequently asked questions relating to the store cross-site scripting vulnerability affecting Halo versions up to 2.143.6. Users with the permission to open tickets may embed malicious JavaScript code into them, that, when accessed by another user, executes within the context of that user. Are hosted Halo instances affected? Hosted customers […]
CVE-2023-4863
The issue is resolved as of version 2.170.1 see Update 31/10/2024 for more information General Information This article contains frequently asked questions relating to the heap buffer overflow vulnerability affecting libwebp. On September 11, 2023, Google published a stable channel update to address the vulnerability with weblibp and assigned CVE-2023-4863 to track this vulnerability. libwebp […]
CORS Policy on Halo API
By default, the CORS policy on all Halo web apps is a wildcard that allows all. To enable a stricter CORS policy to block requests from other origins, follow the below. In appsettings.json in the API and Auth Server add "UseCorsPolicy": true. Also, add "CorsWhiteList" as an array of strings. Enter the hostname of each […]
Progressive Web Application
In this guide we will cover:– What is the Progressive Web Application – Agent Application Progressive Web App – Portal Web Progressive App What is the Progressive Web Application The progressive web app allows you to install Halo on your desktop for easy access. Opening the app will take you straight to your Halo, meaning […]
Agreements (Contracts)
Configuration > Agreements Check out the Academy guides on our Support Portal, which can also be found on the HaloPSA Academy: An Introduction to Billing HaloPSA Academy – An Introduction to Billing Within the Billing Course of the Support Portal, you will find sections on Creating Invoices, Labour Billing and Recurring Invoices. Agreements that are active […]
Operations Assistant for Agents & Team Leaders
In this guide we will cover: – Chat Profiles for Agents – Agent App Virtual Agents – Virtual Analyst Use – Default Agent App Virtual Agents – Chat Improvements Chat Profiles for Agents Chat Profiles are available within the Agent Application, which allows the Virtual Agent feature to be utilised by Agents for quick actions […]
Avalara Integration
In this guide we will cover: – Enabling the Avalara Module – Connecting to Avalara – Importing Customers – Syncing Entities – Voiding an Invoice – Excluding Customers What is the Avalara Integration? The Avalara integration allows you to complete a two way sync of customers between your Halo and Avalara instance. You can also […]
Deprecation of Summary Contains for Filter Profiles and Filters in Lists
Halo will be removing the ability to use the summary field as a filter in lists (by September for all customers, end of July for beta customers). In order to identify the affected filter profiles and lists, please use the following report: https://{YOURHALODOMAIN}/reports?mainview=onlinerepository&id=5556 For reference to the affected area of Halo: Fig 1. Create a […]