Skip to content
#

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

Here are 10,132 public repositories matching this topic...

caddy
bagbag
bagbag commented Apr 26, 2020

(Feature request out of https://caddy.community/t/use-placeholders-in-templates/7697)

I would like to see the ability of using placeholders like {http.error.status_code} in templates. This would allow us, for example, to create a single custom error page in nginx style. For now we have to create a page for every status code we would like to support (maybe using respond with include and ar

YuriyTigiev
YuriyTigiev commented Dec 20, 2019

Problem Description

The option --set doesn't work

Steps to reproduce the behavior:

  1. The command mitmdump.exe -p 8088 --set ssl_version_client=all --set ssl_version_server=all doesn't change configuration

  2. mitmdump.exe -p 8088 --options doesn't show changes

  3. mitmdump.exe --options returns Error starting proxy server: OSError(98, 'Address already in use')

  4. A default co

algo
JLsushmaumesh
JLsushmaumesh commented Mar 31, 2020

Document : https://osquery.io/schema/4.2.0
Table : md_devices [Software RAID array settings]

Column's :

  1. active_disks | INTEGER | Number of active disks in array
  2. failed_disks | INTEGER | Number of active disks in array
  3. spare_disks | INTEGER | Number of active disks in array
    4.check_array_progress | TEXT | Progress of the resync activity
    5.check_array_finish | TEXT | Estimated dur
yippibrian
yippibrian commented May 21, 2019

It looks like most of the advice from the OWASP REST Cheat Sheet is discussed in this API-Security-Checklist, but OWASP talks about the importance of CORS, which is not mentioned at all in this API-Security-Checklist. Probably good to make mention. Also, the OWASP REST Cheat Sheet provides a bit more guidance regarding validation that might be good to incorporate.

https://github.com/OWASP/Che

jetztgradnet
jetztgradnet commented Oct 16, 2017

Which lab is it that you're having issues with?
Lab: Docker for Java Developers

Description

When deploying Java applications in production one usually specifies the amount of memory available to the JVM (-Xmx) and other assorted configuration settings. Unfortunately, this is (usually) static configuration and therefore fixed in the container image. When specifying memory constraints

keeweb
akivamu
akivamu commented Mar 2, 2018

When organizing entries into groups, it's better if the list view can show if an entry already belongs to a group or not. So I can choose to move that entry into group.

Also, it would be nice if there is option to filtering entries that don't belong to any group.

May be a small icon, or tooptip when hover on list's row.

UkonnRa
UkonnRa commented Dec 18, 2019

Is your feature request related to a problem? Please describe.

When querying the Clients/Consent Sessions using pagination, ORY Hydra will only return results with some links, but not the total count of the items, which is useful to display in the frontend, you know, showing the total pages or something.

Describe the solution you'd like

Add the total_count parameter into Hea

jyn514
jyn514 commented Dec 12, 2019

Right now the error messages look like this:

time="2019-12-11T19:36:35-05:00" level=fatal msg="docker-slim: failure" error="json: cannot unmarshal array into Go value of type docker.Image" stack="goroutine 1 [running]:\nruntime/debug.Stack(0x0, 0x0, 0xc0004c7e01)\n\truntime/debug/stack.go:24 +0x9d\ngithub.com/docker-slim/docker-slim/pkg/util/errutil.FailOn(0xb6be20, 0xc000218050)\n\tgithub.c
teleport
fspmarshall
fspmarshall commented Dec 12, 2019

The tsh ssh command dumps errors that originate from the proxy in an ugly and unformatted state. E.g. when connecting to a node that does not exits:

error: "failed connecting to node one-sshd. \nERROR REPORT:\nOriginal Error: *net.OpError dial tcp 172.10.1.21:3022: connect: connection refused\nStack Trace:\n\t/gopath/src/github.com/gravitational/teleport/lib/reversetunnel/localsite.go
BjarniRunar
BjarniRunar commented Jul 21, 2019

Mailpile should automatically stop trying to re-check a mailbox/folder which has been deleted from the source/server.

This should be done in such a way that if the mailbox reappears, polling starts again. This should be relatively straightforward, mostly we need to make sure that each individual mailbox type communicates clearly that it's "gone" (not just temporarily unavailable) and the master

Wikipedia
Wikipedia

Security apps

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

GuardRails

GuardRails provides continuous security feedback for modern development teams

Renovate

Keep dependencies up-to-date with automated Pull Requests

Dependabot Preview

Automated dependency updates for Ruby, JavaScript, Python, Go, PHP, Elixir, Rust, Java and .NET

LGTM

Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review

BackHub

Reliable GitHub repository backup, set up in minutes

WhiteSource Bolt

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

See more Security apps
You can’t perform that action at this time.