coreyshuman / geekwiseapplicationsecurity Goto Github PK
View Code? Open in Web Editor NEW12-week Geekwise course on web application security and hardening.
geekwiseapplicationsecurity's People
Contributors
Stargazers
Watchers
Forkers
michaelachrisco mwallert pratimasakinala apethoud yeseniaec benreckas mctwitty nishaareza jeffdonaldson1 sfitzgerald16 fleury14 koreynichols angel917k parkersalterego pakawaka1 garciaryan arturoceballos darkstarm pgarduque banuelos10 vperezma karvel vchho rezaduty jenbrook375 jonathanwalkerscripts sramos9191 jlohustle isaiahcruz70 bytexsize gracel0 knowledge4free ankityadavv2014 cybersecurity-labsgeekwiseapplicationsecurity's Issues
Docker Migrations Running Simultaneously
The docker migrations aren't waiting for the previous to finish before continuing.
It is currently using Promise.all(filePromises), this should be changed to a synchronous solution.
Support code tags with embedded html
The browser strips invalid html tags before my parsing script can fix it up.
Example:
<pre><code class="php"><html>
<body>
<?php
print "Not found: " . urldecode($_SERVER["REQUEST_URI"]);
?>
</body>
</html></code></pre>
becomes:
<pre><code class="php">
<?php
print "Not found: " . urldecode($_SERVER["REQUEST_URI"]);
?>
</code></pre>
I added the following script tag to encapsulate these types of code sections:
<script type="code-template"></script>
These will be stripped out. However if there is embedded script tags, it doesn't work properly:
<pre><code><script type='code-template'><script>alert("You've been hacked!")</script></script></code></pre>
Options:
- Fix the stripping code by building an algorithm to keep track of nested divs
- Go a different route:
- Use the script tags only and have my implementation manually add the
<code>tag and pass in the script content. HLJS already seems to have some support for something like this.
- Use the script tags only and have my implementation manually add the
error received
01-01BasicInsecureApp front end doesn't work on firefox
Something is up with the scripting in Firefox (works fine in chrome).
Try clicking edit to see the issue.
entrypoint.sh loses execute permission when edited on windows
May want to implement the chmod a+x command as part of the image startup process, or look into better options.
Migration fail if it starts before postgres is ready.
Postgres takes a long time start up on some machines (30+ seconds).
In this situation, the migration server will try to run and will crash because Postgres will either not have opened the port yet, or it will send a incomplete startup packet.
Migration server should have a retry mechanism to keep trying until success (or container kill).
docker-composer up permission denied error Ubuntu 16.04
I am getting the following error when using docker-compose up
$ docker-compose up
01basicinsecurewebapp_frontend_1 is up-to-date
01basicinsecurewebapp_postgres_1 is up-to-date
Starting 01basicinsecurewebapp_apiserver_1 ... error
ERROR: for 01basicinsecurewebapp_apiserver_1 Cannot start service apiserver: OCI runtime create failed: container_linux.go:296: starting container process caused "exec: \"/home/node/server/scripts/entrypoint.sh\": permission denied": unknown
ERROR: for apiserver Cannot start service apiserver: OCI runtime create failed: container_linux.go:296: starting container process caused "exec: \"/home/node/server/scripts/entrypoint.sh\": permission denied": unknown
ERROR: Encountered errors while bringing up the project.
Arrow functions in PHP code samples are getting mangled
Example:
$stmt = $dbh->prepare("SELECT * FROM product WHERE price BETWEEN :price1 AND :price2");
$stmt->bindParam(':price1', $price1);
$stmt->bindParam(':price2', $price2);
$price1 = 1;
$price2 = 10;
$stmt->execute();
Becomes:
$stmt = $dbh->prepare("SELECT * FROM product WHERE price BETWEEN :price1 AND :price2");
$stmt->bindParam(':price1', $price1);
$stmt->bindParam(':price2', $price2);
$price1 = 1;
$price2 = 10;
$stmt->execute();
Closed parentheses within a md-style URL will break link
The regex needs to be adjusted to be more greedy and grab everything until the last closed url.
example that would break:
[My Site](http://mysite.com/(test))
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.