Incremental Deliverable 3 Formal Security Practices Inspection - SeoulSKY/safe-zone-system GitHub Wiki

Document

Date

  • October 28th

Length

  • 30 minutes

Participants

  • Bathiya(reviewer)
  • Emeka(reviewer)
  • Jeremie(notetaker, reviewer)
  • Jorgen(reader, reviewer)
  • Josh(author)

Agenda

  • Go over the security document

Notes

  • Clarify what are CSRF attacks are, how they are the problematic to security with CSRF and how the protection works to stop attacks
  • Explain what deep linking is and why it isn't secure
  • Explain what a raw SQL query is
  • Create tests to ensure we can't use any sql injections
  • Need to look into Access-Control-Allow-Origin '*' in the reverse proxies