fixed vulnerabilites found by other group

Geend / HshHelper

Hannover University of Applied Sciences and Arts - Master Project - Security competition to make a secure filesharing website.

GNU General Public License v3.0

0 stars 1 forks source link

fixed vulnerabilites found by other group #147

Closed juliuszint closed 5 years ago

juliuszint commented 5 years ago

Fixes all vulnerabilites found by the enemy team. Solved the _blank problem by introducing a trampoline page that is under our control (so no evil redirect on opener).

Flips01 commented 5 years ago

Prüfen ob fix per window.opener.opener umgangen werden kann. Julius hat vorgeschlagen, dass opener genullt wird.

juliuszint commented 5 years ago

hab den opener noch genullt. damit sollten alle probleme aus der welt sein