WJ Straver

SECURITY ISSUE: Cache-Control headers are set on "public" on the download log file

3

Hi all, With a pentest we just discovered a big security with using this package behind a CDN. If you want to download the log file, it will do so...

NOVA 4 SECURITY ISSUE: no authenticate middleware on log-tool routes

3

Hi, After another pentest with using Nova 4, we noticed we could download the log files **without being logged in**. After some digging, I noticed the `config/nova.php` part for middleware...

Right now, the setting `saml_2_setting.idpNames` is not being used at all. I would like to use this to switch between IDP providers on live, staging and local with a value...