Comments (14)
Hello,
I would be interested to get feedback from this.
thank you
from frontend.
Hi @cedricbonhomme,
I would prefer sending details of this to a core contributor. I also tried reaching @jmathai by mail but without success.
Best Regards,
robin
from frontend.
Hi @rverton, can you send it to jaisen at githubusername dot com?
from frontend.
Hi @jmathai,
thanks for responding. I just sent another email to this address, maybe it was marked as spam the last time.
from frontend.
Hi @rverton ,
it is possible to have some news? At least by email
Thanks a lot!
from frontend.
HI @cedricbonhomme,
I'm in contact with @jmathai and his plan is to add the vulnerabilities as issues here and/or directly fix them. Initially I planned to wait for releasing the advisory until a fix is released, but if the vulnerabilities are published as issues here I will post the advisory as soon as possible.
from frontend.
OK, thank you for the feedback!
from frontend.
@cedricbonhomme I forwarded you the report which @rverton shared with me.
from frontend.
thank you! I'll have a look at the report.
from frontend.
Hi @cedricbonhomme,
looks like you are working on this now, so if you have any questions, feel free to contact me directly at hello at robinverton de.
from frontend.
Hi @jmathai,
Do you will have some time soon to have a look at it (and also the PR)?
thanks,
from frontend.
Hi @jmathai, is there any update on this? The PR from cedric with the vulnerabilities is public, so it would be better to merge this sooner than later.
Thanks
from frontend.
Sorry for the delay --- i reviewed the pr and added some comments.
from frontend.
Hi @jmathai, @cedricbonhomme ,
thanks to both of you for your time fixing this. I'll finish and publish the advisory soon.
Bests,
Robin
from frontend.
Related Issues (20)
- Discuss future plans for Trovebox HOT 43
- can I edit tag or albums after photo uploaded? HOT 1
- setup-hangs-fails-at-final-step-3 HOT 13
- is trovebox really private if use S3 storage? HOT 1
- can't login in safari browser HOT 2
- Missing Photos in default Album Listing, even after successful upload PLUS duplication of some other photos HOT 4
- S3 bucket eu-central-1 (Frankfurt) not working because of Sigv4 HOT 3
- Error 51 when accessing S3 buckets with a period (.) in the name
- trovebox uploads fail with " Integrity constraint violation:" HOT 6
- Upload photos to Trovebox by dragging them into a folder on Dropbox
- Remove persona support HOT 12
- Define a new governance for the project HOT 2
- Project dead? HOT 4
- a
- Call to setActiveFieldForAlbumsFromElement with incorrect number of Parameters ... HOT 2
- installation script does not install prerequisites, and doesn't fail when it can't HOT 4
- Frontend capstone project
- Issue Template HOT 3
- [DOCS]: Pull Request template
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from frontend.