Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

No permetre redireccions a qualsevol lloc des de baixades.softcatala.org #261

Open
xavivars opened this issue Jul 10, 2023 · 0 comments
Open

No permetre redireccions a qualsevol lloc des de baixades.softcatala.org #261

xavivars opened this issue Jul 10, 2023 · 0 comments

Comments

@xavivars
Copy link
Member

Crear un nonce per a baixades que només siga vàlid durant X hores.

Actualment, es pot redirigir a qualsevol lloc, i es pot explotar com a vulnerabilitat.

Faltaria comprovar si el catalanitzador pot generar el mateix tipus de nonces, o si podem detectar d'alguna manera peticions provinents del catalanitzador (@jordimas )
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@xavivars