Security Issues - Githubissues

tnc-ba / strongTNC

BYOD TNC Database Management Tool

GNU Affero General Public License v3.0

0 stars 0 forks source link

Security Issues #285

Closed dbrgn closed 10 years ago

dbrgn commented 10 years ago

[x] Remove default root user
[x] Only allow API access with authentication
[x] Look for other potential problems

dbrgn commented 10 years ago

Deployment checklist:

Add TLS certificates
Enable HTTP Strict Transport Security (HSTS) in your webserver
Set CSRF_COOKIE_SECURE to 1 in your settings.ini

dbrgn commented 10 years ago

Ready for review, @cfaessler.

coveralls commented 10 years ago

Coverage increased (+0.13%) when pulling dfb49c3c4398f0f678a98dfd5e6214727b321adf on issue285 into c9c4687a6cbce71737190dad433460b7a2e8cc40 on master.

cfaessler commented 10 years ago

Bruce approves: good to Merge!