BD2KGenomics / brca-website-deprecated

This repo is deprecated! Please use https://github.com/BD2KGenomics/brca-exchange
Apache License 2.0
6 stars 9 forks source link

Security: filter sensitive values from user data #135

Closed strbean closed 7 years ago

strbean commented 8 years ago

The back end delivers all data in the user table to the client. This includes password hashes, activation keys, etc.

Data sent should be checked against a whitelist of non-sensitive columns.