laserrapt0r

The included jquery version is vulnerable

2

Please email [email protected] with details of the security issue prior to posting here. Etherpad-Lite includes jQuery version 3.0.0 There are known security issues: https://nvd.nist.gov/vuln/detail/CVE-2019-11358 https://nvd.nist.gov/vuln/detail/CVE-2020-11022 https://nvd.nist.gov/vuln/detail/CVE-2020-11023 Please update jQuery to...

Please update socket.io

1

Please email [email protected] with details of the security issue prior to posting here. There is a security issue with socket.io 2.4.1 that allows denial of service attacks. The issue is...

This worked in the past but it seams it stopped working. When running make bootstrap this error occures: Hit:1 http://security.debian.org/debian-security stretch/updates InRelease Ign:2 http://deb.debian.org/debian stretch InRelease Hit:3 http://deb.debian.org/debian stretch-updates InRelease...

ticks were calculated by x values, not y.

Missing http security headers

8

The installation of BBB 2.5.4 (with bbb-install-2.5) does not set http security headers like content-security-policy, x-frame-options, hsts, x-content-type-options. Is there any reason for not using these settings?