carlspring / carlspring/vertx-vulns
Build a collection of typical security concern topics
- Dominant language
- Java
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
# Task Description
We need to build a collection of typical security concern topics. These will then be used to produce a list of code examples that illustrate bad and good code.
* Injection vulnerabilities
* #9
* Command injection
* #8
* #11
* #12
* Malicious file uploads
* Authentication and authorization flaws
* #7
* Incomplete or missing security controls
* Broken access control
* #6
* Using `io.vertx.core.http.HttpClient`
* Using `io.vertx.reactivex.ext.web.client.WebClient`
* Insecure defaults and configurations
* Insecure data storage (e.g., plaintext passwords, sensitive data in logs)
* Insufficient session expiration and management
* Information leakage
* Denial of Service (DoS) attacks
* Lack of input validation
* Insecure deserialization
* Broken cryptography (e.g., weak algorithms, insufficient key length)
* Improper error handling
* Race conditions
* Use of unsafe or deprecated functions
# Open Questions
# Notes
# Task List
The following tasks will need to be carried out:
* [ ] Build a collection of topics.
* [ ] Add a brief summary for each topic
* [ ] Update the documentation.
# Useful Commands
# Incurred Costs
# Task Relationships
This task:
* Is a sub-task of: #
* Depends on: #
* Is a follow-up of: #
* Relates to: #
# Resources
# Useful Links
# Points of Contact
Contributor guide
No contributing guide indexed for this repository
Research direction
No file or test is named. Start by reviewing the existing repository structure and the referenced topics (#6–#12), then identify where the collection and summaries should live. Done means the typical security topics are collected, each has a brief summary, and the documentation is updated.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100