dmarx / dmarx/dispatchr

Add authentication

Open
#3 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
R
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

I'm not a security expert, but I'm pretty sure this application runs the risk of enabling remote code execution. It will only execute code via `source()`, so any malicious code would need to be written to the server, and the dispatchr server would need to have read access on that location. It seems unlikely that this is actually a vulnerability, but I feel like it's probably a good idea to be concerned.

A simple way to add a little more safety would be to add user authentication. This wouldn't necessarily need to be required, but it should at least be an option. so something like:

Rscript dispatchr-authenticato.r -u userName -p passWord
Rscript dispatch.r do/some/thing.r arg0
Rscript dispatch.r do/some/thingelse.r arg1

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.