Skip to content

Instantly share code, notes, and snippets.

View brmnjsh's full-sized avatar

brmnjsh brmnjsh

4 followers · 9 following
View GitHub Profile
@brmnjsh
brmnjsh / measure2018wishlist.md
Last active January 12, 2018 20:23

2018 measure team wishlist

Wiki:

  • Initial task is to get Gladdy’s process in the wiki for the rest of the dev team to read and get an understanding of
  • Integrate into dev flow
    • Add a description of your new features as they happen and make the content a part of the review to make sure it is clear and concise
  • Areas would include:
    • Q&A/FAQ
  • Onboarding
@brmnjsh
brmnjsh / security_overview.md
Last active August 16, 2018 20:16
quick overview of potential security threats as well as possible solutions

security audit

current issues

js

  • mathjax excessive use of setTimeout('string') parameters, is bad for performance but also insecure
  • ace.js uses setInnerHtml
  • lots of uses of .innerHtml in the code, increased chance of XSS
  • document.write() esp. w/ scripts still in use (esp. in plugins)