search

nditcommunity / nditcommunity.github.io

Website for Neurodiversity In Tech
https://nditcommunity.github.io
MIT License
1 stars 1 forks source link

Assess site security #28

Open hayleyw7 opened 5 months ago

royemosby commented 5 months ago

GH pages and Netlify deploys are https by default and have their own automated cert update process

marcusolsson commented 5 months ago

Right now we're using mailto: links with the contact email, which means that email harvesters may pick it up to send spam. There have also been a few vulnerabilities related to mailto links.

If it's important that visitors can contact the team using email, we could also consider a contact form. Netlify Forms looks like a good solution since we don't have a backend (though I've never used it myself).

hayleyw7 commented 5 months ago

@marcusolsson Good insights! I personally hate when a website only has a form when I'm a user (instead of actual contact info), but I'm unsure how many people share that sentiment.

marcusolsson commented 5 months ago

I don't disagree 🙂 Just thought I'd at least mention it. AFAIK the attack vector is more client side.