Create security tests (and fix them) for Web UI

[turicas]

[turicas]

@jseidl, can you please provide more information about how aleph Web UI is not secure?

[jseidl]

I'm just inferring due the lack of treating and testing. All inputs and get
routing shall be checked and validated.

Also the search box is my major point of concern. Strict whitelisting shall
be enforced there
On Jun 7, 2015 4:52 PM, "Álvaro Justen" notifications@github.com wrote:

@jseidl https://github.com/jseidl, can you please provide more
information about how aleph Web UI is not secure?

—
Reply to this email directly or view it on GitHub
#49 (comment).

[jseidl]

Also the webui lacks quota for uploading and brute force login control.
Also no captcha on user registration could allow Mass registration scripts
On Jun 7, 2015 4:57 PM, "Jan Seidl" jseidl@wroot.org wrote:

I'm just inferring due the lack of treating and testing. All inputs and
get routing shall be checked and validated.

Also the search box is my major point of concern. Strict whitelisting
shall be enforced there
On Jun 7, 2015 4:52 PM, "Álvaro Justen" notifications@github.com wrote:

@jseidl https://github.com/jseidl, can you please provide more
information about how aleph Web UI is not secure?

—
Reply to this email directly or view it on GitHub
#49 (comment).