Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove coffee-script support for team data #186

Closed
DinisCruz opened this issue Nov 4, 2016 · 1 comment
Closed

Remove coffee-script support for team data #186

DinisCruz opened this issue Nov 4, 2016 · 1 comment
Labels
P1 refactor risk - fixed security

Comments

@DinisCruz
Copy link
Collaborator

This was a good feature in the beginning, but with the recent ability to create (#87), rename (#161) and delete (#130) teams; and the addition to metadata fields (#148), this feature is not really needed any more

image

This is also the root cause of the most dangerous security issue that we current have (#69 - RCE via coffeeScript team file)
DinisCruz added a commit to OWASP/Maturity-Models-API that referenced this issue Nov 4, 2016
@DinisCruz
First at improving metadata support
193f07b 
(see OWASP/Maturity-Models#148)

Removed code that added support for using coffee-script files to create team values
(see OWASP/Maturity-Models#186)
@DinisCruz
Copy link
Collaborator Author

done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
P1 refactor risk - fixed security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@DinisCruz