VSinerva/csb-project-1
Archived
1
0
Fork 0
Code Activity

Add reminders for the upcoming vulnerabilities

Browse source
This commit is contained in:
Vili Sinervä 2024-11-24 18:03:12 +02:00 • committed by GitHub
parent efee16df40
commit 1ed03f7d53
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
README.md
View file

@ -17,20 +17,20 @@ I am using the basic Django template, so no instructions are included.
FLAW 1:
Broken Access Control
Broken Access Control (Can delete another user's notes)
FLAW 2:
Cryptographic Failure
Cryptographic Failure (Weak/No password hashing)
FLAW 3:
SQL Injection
SQL Injection (Unsanitized SQL query for search)
FLAW 4:
Security Misconfiguration
Identification and Authentication Failure (No password strength checks)
FLAW 5:
CSRF
CSRF (No CSRF token for Delete)