equinor / flotilla

Flotilla is the main point of access for operators to interact with multiple robots in a facility.
Eclipse Public License 2.0
16 stars 35 forks source link

Investigate a safe way to share link in inspection cards. #1449

Open UsamaEquinorAFK opened 6 months ago

UsamaEquinorAFK commented 6 months ago

Describe the improvement you would like to see Add the inspection link to inspection cards.

How will this change existing functionality? Using action button can be unsafe as an malicious actor can share unwanted links hidden in those button if they have access to the incoming webhook.

How will this improvement affect the current Threat Model? Discuss with cyber security team before moving ahread.

tsundvoll commented 6 months ago

First of all we want to find out where we should link to.

For now the solution is to not include the link, at least not as a button

aeshub commented 4 months ago

This issue has automatically been marked as stale as there has been no activity for 60 days.