search

sdgniser / lnf

A simple 'Lost and Found' web application built with Django
2 stars 4 forks source link

Crypto Configuration flaw/Cryptographic failure #6

Closed Bikash-Bhatta closed 1 year ago

Bikash-Bhatta commented 2 years ago

In order to secure the websites and to avoid PII leakage change the referer header from HTTP to HTTPs as it sends the data in encrypted form to the server. The Cryptographic Failure is ranked#2 in the OWASP vulnerabilities list and need to be fixed to make the website more secure. This type of flaws are also precursor to SQL Injection. Although the site is not prone to SQL Injection but might be in future.

PeithonKing commented 1 year ago

@Bikash-Bhatta Closing this issue because it cannot be and need not be solved as long as we are inside NISER.