-
The WireServing bug can be exploited by leveraging an AKS cluster that use the Azure CNI for network configuration and Azure network policy (NPM). The attack hinges on a TLS bootstrap attack targeting…
-
# Primer
Dangerzone currently uses two containers (Docker containers on MacOS/Windows, Podman containers on Linux) for the conversion process:
- The first container accepts a suspicious document…
-
Parent issue: https://github.com/freedomofpress/dangerzone/issues/221
# Security Concern
One aspect of the sanitization that Dangerzone has not targeted yet is avoid leaving traces of the conver…
-
Large keys that end up in the manifest as boundaries (start, end keys) can cause the manifest to balloon. There exists a threshold ([`MaxManifestFileSize`](https://github.com/cockroachdb/pebble/blob/1…
-
Parent issue: https://github.com/freedomofpress/dangerzone/issues/221
If an attacker manages to escape the container, we want to restrict them as much as possible. One way to do so is by using AppA…
-
A significant percentage of security issues across the software industry are caused by interpolation hazards: cases where a bad actor can influence the content of variables interpolated or concatenate…
japhb updated
5 months ago
-
Hey, I see you are using bleach on the HTML contents, which is awesome.
A great defense in depth measure available in all modern browsers is [CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/…
-
**Description**
This is related to https://github.com/openenclave/openenclave/issues/2278.
For defense-in-depth, CCF should be built with control flow integrity enabled. (Also referred to as Contr…
-
pysam.pileup `max_depth` argument is by default 8000, however for RNA-seq there are edge cases as below, where a germline intronic SNP in a strongly expressed gene will appear as a false-positive soma…
-
It's possible in some cases that an already existing file would not have permissions intended in `os.WriteFile`
https://github.com/Azure/azure-dev/blob/main/cli/azd/pkg/auth/file_cache.go#L57
A…