codersforcauses / codersforcauses/game-dev
Pentest site on local deployment instance
Open
enhancement
Requires MVP completion
- Dominant language
- TypeScript
- Stars
- 7
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
It would be worth before handing the site over to the game dev club to deploy the site locally and see if there are any glaring vulnerabilities, e.g.:
* Zap
* Cross-site scripting vulnerabilities from inline scripts, forms, etc, e.g. `href=javascript:alert('XSS')`
* Test malicious requests
Additionally, we should investigate configuring nginx, specifically CORS, to make cross-site scripting etc more difficult.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.