security review - Githubissues

WBCE / News-with-Images

Extended news module which allows to have multiple images per post

0 stars 4 forks source link

security review #16

Closed mrbaseman closed 5 years ago

mrbaseman commented 5 years ago

siehe #7
das soll Anlass sein, mal generell drüber zu schauen, ob User-Input sicher genug aufbereitet wird
ftan Unterstützung??
use idkeys

mrbaseman commented 5 years ago

I have implemented counter measures against SQL injections and cross site scripting and we have removed the possibility to inject droplets (and perhaps even worse stuff) from the frontend by removing the comments feature