-
Notifications
You must be signed in to change notification settings - Fork 44
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Default port and HTTP without TLS need to be removed #1
Open
akondasif
wants to merge
8
commits into
MossabTN:master
Choose a base branch
from
akondasif:master
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Commits on Jul 4, 2020
-
Default port and HTTP without TLS need to be removed
Why Default ports are susceptible to vulnerabilities Description Most cyber attacks occur due to default port usage. Reff: https://www.bleepingcomputer.com/news/security/most-cyber-attacks-focus-on-just-three-tcp-ports/#:~:text=According%20to%20the%20report%2C%20the,(Hypertext%20Transfer%20Protocol%20Secure) Use of HTTP without TLS/SSL is a security weakness: CWE-319: Cleartext Transmission of Sensitive Information
Configuration menu - View commit details
-
Copy full SHA for b4e2aec - Browse repository at this point
Copy the full SHA b4e2aecView commit details -
Configuration menu - View commit details
-
Copy full SHA for 12492b2 - Browse repository at this point
Copy the full SHA 12492b2View commit details -
Configuration menu - View commit details
-
Copy full SHA for a93bd04 - Browse repository at this point
Copy the full SHA a93bd04View commit details -
Configuration menu - View commit details
-
Copy full SHA for 20ae41b - Browse repository at this point
Copy the full SHA 20ae41bView commit details -
Configuration menu - View commit details
-
Copy full SHA for 2e963cb - Browse repository at this point
Copy the full SHA 2e963cbView commit details
Commits on Jul 8, 2020
-
Some of the endpoints are still using HTTP that is insecure ... replaced with secure HTTP (HTTP with SSL/TLS) that exists Details: I found instances where the HTTP protocol is used instead of HTTPS (HTTP with TLS). According to the Common Weakness Enumeration organization this is a security weakness (https://cwe.mitre.org/data/definitions/319.html).
Configuration menu - View commit details
-
Copy full SHA for 54ab592 - Browse repository at this point
Copy the full SHA 54ab592View commit details -
Some of the endpoints are still using HTTP that is insecure ... replaced with secure HTTP (HTTP with SSL/TLS) that exists Details: I found instances where the HTTP protocol is used instead of HTTPS (HTTP with TLS). According to the Common Weakness Enumeration organization this is a security weakness (https://cwe.mitre.org/data/definitions/319.html).
Configuration menu - View commit details
-
Copy full SHA for 553e398 - Browse repository at this point
Copy the full SHA 553e398View commit details
Commits on Jul 10, 2020
-
Some of the endpoints are still using HTTP that is insecure ... replaced with secure HTTP (HTTP with SSL/TLS) that exists. These fixes are similar to MossabTN#1 Details: I found instances where the HTTP protocol is used instead of HTTPS (HTTP with TLS). According to the Common Weakness Enumeration organization this is a security weakness (https://cwe.mitre.org/data/definitions/319.html).
Configuration menu - View commit details
-
Copy full SHA for 9577716 - Browse repository at this point
Copy the full SHA 9577716View commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.