Jan Klopper

Feat/CVE-2024-45519

4

### Changes adds a boefje that scans smtp hosts for the Zimbra vurln known as CVE-2024-45519 ### QA notes Untested, as always. ### Code Checklist - [ ] All the...

skip erroring ooi's in ooi_repository.py

4

Add code to not crash the entire result set when objects could not be shoehorned into our current ooi models. ### Changes This Pr add's some code to optionally send...

fix permissions on report_overview.py

2

### Changes - Restrict members from deleting report oois, if they do not have the permissiom. ### Issue link Closes ... ### Demo  ### QA notes - Add a...

File based tests for the normalizers. supply a raw file and an expected serialized output file and this will create a new ad hoc test

2

### Changes This adds a tester which looks for specific input and output files in the normaliser folders. It then runs the input agains the normalizer and checks if the...

Deeper / more fine grained CSP findings

1

We should offer a normalizer for CSP headers that creates separate findings, each with their own severity-level and remarks for the various CSP issues. Maybe, once normalizers can have configurations,...

Feat/raw files in tasklist

7

### Changes Adds limited length in-line viewing of raw files on the task list. Still needs work to adhere to the designs: https://www.figma.com/file/QRL8085Z827bNdO0bIDdFL/KAT-%7C-Design-%7C-For-review?node-id=1%3A3&t=lZE8qsKdKNgKvk9Y-1, but @stephanie0x00 's security considerations have been...

## About this feature ### Detailed description Currently we are missing some audit events due to not triggering the correct events in some views when changing OOI's. To make this...

Feat/cleanup add ooi form

2

### Changes This removes empty optional choice fields from the add_ooi form, It also select the only valid option for required fields, if there is only one option. It also...

Tracking issue for: - [ ] https://github.com/minvws/nl-kat-coordination/security/code-scanning/33

Add question/config and better defaults for Cert expiration bit/nibble

3

## About this feature Currently we have hardcoded rules around the expiration notifications of certificates. these rules however make less and less sense if you look at the current and...