Overview
- Title
- do a security review (web)
- Duration
- 240
- Difficulty
- Hard
- Types
- Quality Assurance,Code
- Tags
- html,css,jinja2,javascript,security
- Mentors
- thomaswaldmann,rb_proj,waldi,esyr,pkumar_7
- Count
- -1
Description
Abstract
Your task is to do a review of moin2 searching for (potential or real) security issues.
The review needs to include the html/jinja2 templates, the css and the javascript code.
Details
Deliverables:
- regularly maintain a wiki page, document what exactly you are working on and what you have completed
- regularly communicate with the moin devs
- if you find issues and they are easily fixable, fix them, provide changesets/patches
- if you fix something, make sure you fix all issues of the same kind
- if you find hard or time consuming issues, file new issues on the issue tracker
Skill Requirements
You need to have very good skills about the stuff you are reviewing. You need to know what can go wrong usually.
Do not take this task if you have never done such a task before.
Links
Note: unless otherwise noted, tasks usually refer to moin2 (http://moinmo.in/MoinMoin2.0)!
http://hg.moinmo.in/moin/2.0 or http://bitbucket.org/thomaswaldmann/moin-2.0 - repository of moin2
http://hg.moinmo.in/moin/1.9 - repository of moin 1.9
http://moimo.in/MoinMoinChat - please join us on IRC #moin-dev