Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Documentation:Developer] Summer report update #567

Merged
merged 4 commits into from
Dec 1, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 2 additions & 7 deletions _docs/developer/google_summer_of_code/2023_Musaab_Imran.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ category: Developer > Google Summer of Code 2023
## 🛡️ Website Security and Penetration Testing
The security of the Submitty website is of paramount importance due to its direct impact on student grades and academic integrity. Even a single vulnerability can lead to unfair academic advantages and legal complications concerning student data protection. Therefore, this project aimed to contribute to the assurance of proper access control, authorization mechanisms, and robust code that align with the high security standards expected from educational platforms like Submitty.

You can find all my merged PRs in <a href="https://github.com/Submitty/Submitty/pulls?q=assignee%3A%40me+is%3Amerged" style="color:blue">this link</a>.
You can find all my merged PRs in <a href="https://github.com/Submitty/Submitty/pulls?q=assignee%3Amusaabimran+is%3Amerged+" style="color:blue">this link</a>.

---
## 🎯 Project Scope
Expand Down Expand Up @@ -98,15 +98,10 @@ Implemented Referrer-Policy header to prevent the leakage of sensitive informati
🔺[PR #9772](https://github.com/Submitty/Submitty/pull/9772)


#### Updating Disabled Functions List
Updated the list of disabled functions to prevent the execution of potentially dangerous PHP functions. This reduces the risk of remote code execution and other malicious attacks.

🔺[PR ]()

#### Whitelisting MIME Types
Whitelisted MIME types to prevent the execution of potentially dangerous file types. This reduces the risk of remote code execution and other malicious attacks. Only the allowed MIME types can be uploaded to the server.

🔺[PR ]()
🔺[PR #10003](https://github.com/Submitty/Submitty/pull/10003)

---
## 👾 Bugfix PRs
Expand Down
Loading