New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create zigbees-submission.md #18

Open

gauraang01 wants to merge 1 commit into securestack-octernship:main from gauraang01:zigbee-s

gauraang01 commented Mar 28, 2023

Added a solution file mentioning the vulnerabilities and bugs I found in the code:

Hardcoded password (Security Vulnerability)
Exposed AWS credentials in app.config (Security Vulnerability)
Hardcoded .npmrc AuthToken
HSTS downgrade possible (Security Vulnerability)
csp is not enabled (Security Vulnerability)
We also need to install this package web-vitals
In our login component inside the form tag we have set it as noValidate which we need to change that.
X-Frame-Options (XFO) header not implemented


          Create zigbees-submission.md

89c85c3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet