Skip to content
#

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

Here are 9,185 public repositories matching this topic...

caddy
YuriyTigiev
YuriyTigiev commented Dec 20, 2019

Problem Description

The option --set doesn't work

Steps to reproduce the behavior:

  1. The command mitmdump.exe -p 8088 --set ssl_version_client=all --set ssl_version_server=all doesn't change configuration

  2. mitmdump.exe -p 8088 --options doesn't show changes

  3. mitmdump.exe --options returns Error starting proxy server: OSError(98, 'Address already in use')

  4. A default co

algo

Extending and consolidating hosts files from several well-curated sources like adaway.org, mvps.org, malwaredomainlist.com, someonewhocares.org, and potentially others. You can optionally invoke extensions to block additional sites by category.

  • Updated Mar 22, 2020
  • Python
yippibrian
yippibrian commented May 21, 2019

It looks like most of the advice from the OWASP REST Cheat Sheet is discussed in this API-Security-Checklist, but OWASP talks about the importance of CORS, which is not mentioned at all in this API-Security-Checklist. Probably good to make mention. Also, the OWASP REST Cheat Sheet provides a bit more guidance regarding validation that might be good to incorporate.

https://github.com/OWASP/Che

aiacobelli2
aiacobelli2 commented Nov 19, 2019

What is missing or needs to be updated?

It would be nice to add the 4 basic questions to the "Define Objectives" section

How should this be resolved?

Add the 4 basic questions:

What does the system do?
Why are we building this?
What needs to go right to get that value?
How do we ensure that those conditions happens?

radare
radare commented Mar 20, 2020
ld: warning: directory not found for option '-L../../cons'
4769/Users/travis/build/radareorg/radare2/libr/..//libr/bin/p/../format/elf/elf.c:3309:34: warning: comparison of unsigned expression >= 0 is always true [-Wtautological-compare]
4770        return bin->shstrtab && sh_name >= 0 && sh_name < bin->shstrtab_size;
4771                                ~~~~~~~ ^  ~
47721 warning generate
nginxconfig.io
kb6673
kb6673 commented Dec 3, 2019

Yoast SEO is a fairly popular WordPress plugin. I've found the nginxconfig.io breaks the sitemaps on every install I've done.

In /etc/nginx/nginxconfig.io/wordpress.conf we could add

# WordPress SEO
location = /wp-content/plugins/wordpress-seo/css/main-sitemap.xsl {}
location = /wp-content/plugins/wordpress-seo-premium/css/main-sitemap.xsl {}

Above the # WordPress: line

jetztgradnet
jetztgradnet commented Oct 16, 2017

Which lab is it that you're having issues with?
Lab: Docker for Java Developers

Description

When deploying Java applications in production one usually specifies the amount of memory available to the JVM (-Xmx) and other assorted configuration settings. Unfortunately, this is (usually) static configuration and therefore fixed in the container image. When specifying memory constraints

UkonnRa
UkonnRa commented Dec 18, 2019

Is your feature request related to a problem? Please describe.

When querying the Clients/Consent Sessions using pagination, ORY Hydra will only return results with some links, but not the total count of the items, which is useful to display in the frontend, you know, showing the total pages or something.

Describe the solution you'd like

Add the total_count parameter into Hea

BjarniRunar
BjarniRunar commented Jul 21, 2019

Mailpile should automatically stop trying to re-check a mailbox/folder which has been deleted from the source/server.

This should be done in such a way that if the mailbox reappears, polling starts again. This should be relatively straightforward, mostly we need to make sure that each individual mailbox type communicates clearly that it's "gone" (not just temporarily unavailable) and the master

Wikipedia
Wikipedia

Security apps

LGTM

Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

Dependabot Preview

Automated dependency updates for Ruby, JavaScript, Python, Go, PHP, Elixir, Rust, Java and .NET

BackHub

Reliable GitHub repository backup, set up in minutes

GuardRails

GuardRails provides continuous security feedback for modern development teams

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

WhiteSource Bolt

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

Renovate

Keep dependencies up-to-date with automated Pull Requests

See more Security apps
You can’t perform that action at this time.