Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

"known security holes"? enumerate? strike? #628

Closed
dckc opened this issue Mar 22, 2021 · 2 comments
Closed

"known security holes"? enumerate? strike? #628

dckc opened this issue Mar 22, 2021 · 2 comments
Assignees
@erights
Labels
confinement Pertaining to confinement of guest programs.
Milestone
local Endo (aka Exo)

Comments

@dckc
Copy link
Contributor

dckc commented Mar 22, 2021 •
edited
Loading

in a recent meeting, @kumavis asked about ...

Still under development: do not use for production systems yet, there are
known security holes that need to be closed.
https://github.com/endojs/endo/blame/master/packages/ses/README.md#L40-L41

The .domain issue (#126) seems to be one. Should we cite it from SECURITY.md / README.md / NEWS.md ?

@erights plans to review the situation to see if there are others.
@dckc dckc added the confinement Pertaining to confinement of guest programs. label Mar 22, 2021
@dckc dckc added this to the Endo Alpha milestone Mar 22, 2021
@dckc
Copy link
Contributor Author

dckc commented Mar 22, 2021

see also security blocker label

@kriskowal
Copy link
Member

Addressed in #988

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@erights erights

Labels
confinement Pertaining to confinement of guest programs.
Projects
None yet
Milestone
local Endo (aka Exo)
Development

No branches or pull requests
3 participants
@kriskowal @dckc @erights