From 1ed03f7d531d1e2923e58d1e6eccfa9063fc4d9f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Vili=20Sinerv=C3=A4?= <39151688+VSinerva@users.noreply.github.com> Date: Sun, 24 Nov 2024 18:03:12 +0200 Subject: [PATCH] Add reminders for the upcoming vulnerabilities --- README.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 29aad73..8c6b5c3 100644 --- a/README.md +++ b/README.md @@ -17,20 +17,20 @@ I am using the basic Django template, so no instructions are included. FLAW 1: -Broken Access Control +Broken Access Control (Can delete another user's notes) FLAW 2: -Cryptographic Failure +Cryptographic Failure (Weak/No password hashing) FLAW 3: -SQL Injection +SQL Injection (Unsanitized SQL query for search) FLAW 4: -Security Misconfiguration +Identification and Authentication Failure (No password strength checks) FLAW 5: -CSRF +CSRF (No CSRF token for Delete)