Skip to content
#

threat-modeling

Here are 78 public repositories matching this topic...

colesmj
colesmj commented Oct 21, 2018

"AA03": { "description": "Weakness in SSO Authorization", "source": (Process, Element), "target": (Process, Server), "condition": "target.implementsAuthenticationScheme is False", },

What if the Process implements BasicAuth or uses mutual TLS (neither of which is SSO)?
If the Process uses SAML or OAuth, then maybe.
Maybe authenticationScheme as a string var is neces

ShubhamPalriwala
ShubhamPalriwala commented Feb 28, 2022

Describe the bug
This will be a tracker issue for any of the further PRs I make to fix small CSS fixes.

  • The threat dragon mascot's size is not responsive and goes out of the screen for various devices!

Any additional context, screenshots, etc
If you also find any such bug and would like it to be fixed, feel free to comment below and I'll take a look at it!

ChristophNiehoff
ChristophNiehoff commented Oct 29, 2021

After every player has passed, but before a new card has been drawn, the "Remove Threat" button is still clickable.
The UI suggests that everything is ok, but the threat does not get removed in this corner case.

I believe it is due to

if (hasPlayerPassed(G, ctx) || (threat.owner !== ctx.playerID)) {
  return INVALID_MOVE;
}

in deleteThreats() in moves.js. One is still at

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Red Team (Offensive) in Cybersecurity.

  • Updated Mar 13, 2022

Improve this page

Add a description, image, and links to the threat-modeling topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the threat-modeling topic, visit your repo's landing page and select "manage topics."

Learn more