Network permissions requested in the Blackboard manifest are overbroad

Panopto / Blackboard-9.1-Plugin-for-Panopto

This is a block for Blackboard 9.1, that allows courses in Blackboard to link directly to Panopto folders. It also allows for SSO between Blackboard and Panopto, and automatically syncs user permissions between both systems.

GNU General Public License v3.0

9 stars 7 forks source link

Network permissions requested in the Blackboard manifest are overbroad #48

Open danroliver opened 3 years ago

danroliver commented 3 years ago

Permissions should only be requested for the socket/ports and hosts being used. Opening up an unrestricted pipe is a security risk.

See screenshot here.

jmalmsten-panopto commented 3 years ago

Hi,

I have filed an internal work item for Panopto to investigate this issue. If you have any other issues please contact Panopto support at https://support.panopto.com.

Thanks, Joe Malmsten