Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adding code to prevent attacks #153

Merged
merged 2 commits into from
Aug 7, 2020
Merged

Adding code to prevent attacks #153

merged 2 commits into from
Aug 7, 2020

Conversation

pranjals149
Copy link
Contributor

Name: Added security to prevent attacks.
About: I've added the code for preventing various types of attacks.

Github Issue Number: #149

Solution of problem

My code contains support to prevent various attacks.
First, to prevent CSRF attack, I've implemented csurf module.
Then, for the secure browsing, the cookies must be secured. In order to achieve this, I've implemented express-session module and made the httpOnly and secure flag to true.
To prevent HTTP Parameter Pollution (HPP) type of attack, I've implemented hpp module.
Finally, for setting some of the HTTP Header, I've implemented helmet module.

Type of Change

  1. New Feature

Checklist

  1. My code follows the same style as the codebase
  2. I made PR against development branch
  3. I have run the test cases locally and it's passing.

@devesh-verma
Copy link
Member

please resole the conflicts

@vaibhavdaren vaibhavdaren merged commit 57a0cf9 into codeuino:development Aug 7, 2020
vaibhavdaren added a commit that referenced this pull request Aug 7, 2020
@vaibhavdaren @Rupeshiya
@devesh-verma @ksraj123 @AuraOfDivinity @pranjals149
frontend sync master gsoc (#169)
940a3fa 
* added update restrictions, techStacks in project and orgId to a user

* added edit restriction mechanism

* intial deactivation mechanism

* intial logging mechanism and deactive account

* issue fix

* fixing org creation issue

* Fixes issues in testing (#160)

* fix failing test file user.test.js

* fixes EADDRINUSE while testing

* fixes issues in prposal route

* fixed issues in org route and added new tests

* Moving Google Analytics requests to backend (#154)

* Moving Google Analytics requetss to backend

* Requested Changes

* Minor changes

* Adding code to prevent attacks (#153)

* modified user's api (#168)

* modified user's api

* login options during login

* Changes for reactions (#166)

Co-authored-by: Rupeshiya <[email protected]>
Co-authored-by: Devesh Verma <[email protected]>
Co-authored-by: Kumar Saurabh Raj <[email protected]>
Co-authored-by: Asel Peiris <[email protected]>
Co-authored-by: pranjals149 <[email protected]>
vaibhavdaren added a commit that referenced this pull request Aug 8, 2020
@vaibhavdaren
Revert "Adding code to prevent attacks (#153)"
ab2348a 
This reverts commit 57a0cf9.
@vaibhavdaren vaibhavdaren mentioned this pull request Aug 8, 2020
Merged
vaibhavdaren added a commit that referenced this pull request Aug 8, 2020
@vaibhavdaren
Revert "Adding code to prevent attacks (#153)" (#170)
94ec342 
This reverts commit 57a0cf9.
vaibhavdaren added a commit that referenced this pull request Sep 13, 2020
@Rupeshiya @devesh-verma
@vaibhavdaren @ksraj123 @AuraOfDivinity @pranjals149
frontend sync master gsoc (#169) (#191)
5a88381 
* added update restrictions, techStacks in project and orgId to a user

* added edit restriction mechanism

* intial deactivation mechanism

* intial logging mechanism and deactive account

* issue fix

* fixing org creation issue

* Fixes issues in testing (#160)

* fix failing test file user.test.js

* fixes EADDRINUSE while testing

* fixes issues in prposal route

* fixed issues in org route and added new tests

* Moving Google Analytics requests to backend (#154)

* Moving Google Analytics requetss to backend

* Requested Changes

* Minor changes

* Adding code to prevent attacks (#153)

* modified user's api (#168)

* modified user's api

* login options during login

* Changes for reactions (#166)

Co-authored-by: Rupeshiya <[email protected]>
Co-authored-by: Devesh Verma <[email protected]>
Co-authored-by: Kumar Saurabh Raj <[email protected]>
Co-authored-by: Asel Peiris <[email protected]>
Co-authored-by: pranjals149 <[email protected]>

Co-authored-by: Devesh Verma <[email protected]>
Co-authored-by: Vaibhav D. Aren <[email protected]>
Co-authored-by: Kumar Saurabh Raj <[email protected]>
Co-authored-by: Asel Peiris <[email protected]>
Co-authored-by: pranjals149 <[email protected]>
vaibhavdaren added a commit that referenced this pull request Sep 13, 2020
@Rupeshiya @devesh-verma
@ksraj123 @AuraOfDivinity @pranjals149 @vaibhavdaren
Minor changes (#193)
fed0e63 
* added update restrictions, techStacks in project and orgId to a user

* added edit restriction mechanism

* intial deactivation mechanism

* intial logging mechanism and deactive account

* issue fix

* fixing org creation issue

* Fixes issues in testing (#160)

* fix failing test file user.test.js

* fixes EADDRINUSE while testing

* fixes issues in prposal route

* fixed issues in org route and added new tests

* Moving Google Analytics requests to backend (#154)

* Moving Google Analytics requetss to backend

* Requested Changes

* Minor changes

* Adding code to prevent attacks (#153)

* modified user's api (#168)

* modified user's api

* login options during login

* Changes for reactions (#166)

* Revert "Adding code to prevent attacks (#153)" (#170)

This reverts commit 57a0cf9.

* Fixed and written all the missing test cases (#172)

* update code

* fixed failing test cases and missing test cases

* User activity tracker using redis (#174)

* update code

* initial mechanism for user tracking

initial mechanism for user tracking

* Security issue (#177)

* update code

* fix security flaws

* fixed test cases

* minor fixes (#178)

* add docs for new contributors (#181)

Co-authored-by: Devesh Verma <[email protected]>
Co-authored-by: Kumar Saurabh Raj <[email protected]>
Co-authored-by: Asel Peiris <[email protected]>
Co-authored-by: pranjals149 <[email protected]>
Co-authored-by: Vaibhav D. Aren <[email protected]>
vaibhavdaren added a commit that referenced this pull request Sep 13, 2020
@vaibhavdaren @Rupeshiya
@devesh-verma @ksraj123 @AuraOfDivinity @pranjals149
pre last week (#173)
6896301 
* added update restrictions, techStacks in project and orgId to a user

* added edit restriction mechanism

* intial deactivation mechanism

* intial logging mechanism and deactive account

* issue fix

* fixing org creation issue

* Fixes issues in testing (#160)

* fix failing test file user.test.js

* fixes EADDRINUSE while testing

* fixes issues in prposal route

* fixed issues in org route and added new tests

* Moving Google Analytics requests to backend (#154)

* Moving Google Analytics requetss to backend

* Requested Changes

* Minor changes

* Adding code to prevent attacks (#153)

* modified user's api (#168)

* modified user's api

* login options during login

* Changes for reactions (#166)

* Revert "Adding code to prevent attacks (#153)" (#170)

This reverts commit 57a0cf9.

* Fixed and written all the missing test cases (#172)

* update code

* fixed failing test cases and missing test cases

* User activity tracker using redis (#174)

* update code

* initial mechanism for user tracking

initial mechanism for user tracking

* Security issue (#177)

* update code

* fix security flaws

* fixed test cases

* minor fixes (#178)

* add docs for new contributors (#181)

* frontend sync master gsoc  (#169) (#191)

* added update restrictions, techStacks in project and orgId to a user

* added edit restriction mechanism

* intial deactivation mechanism

* intial logging mechanism and deactive account

* issue fix

* fixing org creation issue

* Fixes issues in testing (#160)

* fix failing test file user.test.js

* fixes EADDRINUSE while testing

* fixes issues in prposal route

* fixed issues in org route and added new tests

* Moving Google Analytics requests to backend (#154)

* Moving Google Analytics requetss to backend

* Requested Changes

* Minor changes

* Adding code to prevent attacks (#153)

* modified user's api (#168)

* modified user's api

* login options during login

* Changes for reactions (#166)

Co-authored-by: Rupeshiya <[email protected]>
Co-authored-by: Devesh Verma <[email protected]>
Co-authored-by: Kumar Saurabh Raj <[email protected]>
Co-authored-by: Asel Peiris <[email protected]>
Co-authored-by: pranjals149 <[email protected]>

Co-authored-by: Devesh Verma <[email protected]>
Co-authored-by: Vaibhav D. Aren <[email protected]>
Co-authored-by: Kumar Saurabh Raj <[email protected]>
Co-authored-by: Asel Peiris <[email protected]>
Co-authored-by: pranjals149 <[email protected]>

Co-authored-by: Rupeshiya <[email protected]>
Co-authored-by: Devesh Verma <[email protected]>
Co-authored-by: Kumar Saurabh Raj <[email protected]>
Co-authored-by: Asel Peiris <[email protected]>
Co-authored-by: pranjals149 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@vaibhavdaren vaibhavdaren vaibhavdaren approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@pranjals149 @devesh-verma @vaibhavdaren