Page 1 of 1

Did some web security testing in here - Promods Passed

Posted: 17 Jan 2018 16:17
by AssassinLV
I today did some voluntary web security testing on both types of XSS (Cross Site Scripting) attacks. The good thing is - ProMods passed it, and I can tell that no malicious user can do any type of XSS attacks. :)

What is XSS attack?
It's a form of attack when a malicious user sends with the message or any other type of input saves the JavaScript, JQuery or TypeScript code - and other users will get that code executed in their browsers. For example - It could be even a Crypto-Currency miner.

Edit 1:
Checked also fastly the sql injection with 1=1 in topic search, no problems found. :)

That's all from my side. :)

Re: Did some web security testing in here - Promods Passed

Posted: 17 Jan 2018 19:38
by michaelmurfy
We use both Cloudflare and ModSecurity on our platform and several other things I won't go in to. This helps mitigate any problems that phpBB / Wordpress / Our Scripts may have. Our platform has also been pen-tested by a few professionals in the industry with nothing showing up. Not saying it is completely "impossible to break" but I take security very seriously.

Re: Did some web security testing in here - Promods Passed

Posted: 17 Jan 2018 19:47
by AssassinLV
That's actually good. :) Didn't even know that ProMods had a security audit. I simply know that many does not know about different types of security issues. I'm really surprised that ProMods or any Modding community in general takes security seriously. :)
I'm happy to be surprised.