Front-End Checklist - Githubissues

flyve-mdm / web-mdm-dashboard

New generation of the Flyve MDM Dashboard

http://flyve.org/web-mdm-dashboard/

GNU General Public License v3.0

84 stars 50 forks source link

Front-End Checklist #10

Open ajsb85 opened 7 years ago

ajsb85 commented 7 years ago

Hi, @flyve-mdm/frontend-development

Review this documentation to improve the Web Admin Dashboard 👍

The perfect Front-End Checklist for modern websites and meticulous developers

https://github.com/thedaviddias/Front-End-Checklist https://gethead.info/

Gianfranco97 commented 6 years ago

Hi, @flyve-mdm/backend-development

Things to do on the server:

Error pages (errors 500)
X-XSS-Protection
Referrer-Policy
HTTP Strict Transport Security
Cross Site Request Forgery
Cross Site Scripting
X-Content-Type-Options
X-Frame-Options

Ref: https://github.com/thedaviddias/Front-End-Checklist

ajsb85 commented 6 years ago

Hi, @flyve-mdm/backend-development Please, review in deep these topics for the server side. Generate the templates for Apache and Nginx.

ajsb85 commented 6 years ago

Hi, @DIOHz0r Could you review the tasks for the server and work on it? Thank you in advance.

DIOHz0r commented 6 years ago

Hi,

The web server has active a lot of OWASP rules which protect against XSS, CROSS, SQL injections and many other vulnerabilities.

Those tasks are related more to SysAdmin than the web dashboard project because it depends on the web server used and its O.S. installation.

ajsb85 commented 6 years ago

Hi, @Gianfranco97 Do you think that we can close it?

Gianfranco97 commented 6 years ago

Sure, just missing the changes at the server level and if already @DIOHz0r took care of that, I see no problem in closing the issue. I would just like to review the page for 500 errors before integrating and closing it.