close
The Wayback Machine - https://web.archive.org/web/20220123193422/https://github.com/drogonframework/drogon/issues/646
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security #646

Open
KaungZawHtet opened this issue Dec 8, 2020 · 4 comments
Open

Security #646

KaungZawHtet opened this issue Dec 8, 2020 · 4 comments
Labels
enhancement good first issue

Comments

@KaungZawHtet
Copy link

@KaungZawHtet KaungZawHtet commented Dec 8, 2020

How is security preparation for both of maintainers and drogon users ?
Here are something I hope in drogon's roadmap : some security advice with drogon specific code in the documentation , default security tightening in starter projects (example, authentication and authorization in default state of starter projects) and security enhancement in default state of drogon .

In PHP world, here is some notable security advice of yii2 framework maintainers with yii2 specific codes : https://www.yiiframework.com/doc/guide/2.0/en/security-overview

Thank you for your awesome library.
@rbugajewski
Copy link
Collaborator

@rbugajewski rbugajewski commented Dec 8, 2020

Thanks for your feedback. Security is currently a topic that needs more work in the documentation. There are obviously the usual gotchas while dealing with C++, and where general rules app that aren’t specific to Drogon.

It is especially important to take care of memory safety. For a good overview take a look at the C++ Core Guidelines.

The other subject that could be improved is input validation & sanitization.

As always every PR is welcome 🙂

@marty1885 marty1885 mentioned this issue Jan 2, 2021
Closed
@MUzairS15
Copy link

@MUzairS15 MUzairS15 commented Mar 1, 2021

Hello, I am a newbie and want to cintribute could anyone pls guide me abt this issue?

@an-tao
Copy link
Member

@an-tao an-tao commented Mar 2, 2021

@MUzairS15 Hi~, thank you so much for your plan to contribute. Which feature do you want to make?

@MUzairS15
Copy link

@MUzairS15 MUzairS15 commented Mar 6, 2021

i am not underestanding what really i can do pls guide me

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement good first issue
Projects
None yet
Milestone
No milestone
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
4 participants
@rbugajewski @KaungZawHtet @an-tao @MUzairS15