search

sdgniser / listings

"Basically, olx but for niserites only"
2 stars 1 forks source link

Crypto Configuration flaw/Cryptographic failure #10

Closed Bikash-Bhatta closed 2 years ago

Bikash-Bhatta commented 2 years ago

In order to secure the websites and to avoid PII leakage change the referer header from HTTP to HTTPs as it sends the data in encrypted form to the server. The Cryptographic Failure is ranked#2 in the OWASP vulnerabilities list and need to be fixed to make the website more secure. This type of flaws are also precursor to SQL Injection. Although the site is not prone to SQL Injection but might be in future.

PeithonKing commented 2 years ago

@Bikash-Bhatta Closing this issue because it cannot be and need not be solved as long as we are inside NISER.