Skip to content
#

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

Here are 15,099 public repositories matching this topic...

caddy
gucki
gucki commented Dec 12, 2020

It seems Caddy does not support wildcards/ expression matching in the reverse proxy's header_up.

For example this does not remove any headers:

header_up -X-SHIBBOLETH-*

This works as expected, but is limited in its use:

header_up -X-SHIBBOLETH-LOGIN

It'd be great if Caddy would support wildcards/ expression matching in the reverse proxy's header_up/ header_down.

algo
RandomDSdevel
RandomDSdevel commented Sep 23, 2017

OS/Environment

None yet, but I'm working on OS X v10.11.6 'El Capitan' client-side. (See 'The way of deployment (cloud or local)' below for details on considered server infrastructure.)

Ansible version

None yet, as I haven't yet gotten that far into setting up Algo.

Version of components from requirements.txt

Not applicable (see above.)

Summary of the pro

Liberating Web Analytics. Star us on Github? +1. Matomo is the leading open alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. We love Pull Requests!

  • Updated Jan 5, 2022
  • PHP
nginxconfig.io
RebelliousWhiz
RebelliousWhiz commented Dec 29, 2021

Sorry for not following the template. It's a straightforward question.

By enabling "WordPress-specific rules", the following codes will be added to the wordpress.conf:

# WordPress: deny general stuff
location ~* ^/(?:xmlrpc\.php|wp-links-opml\.php|wp-config\.php|wp-config-sample\.php|readme\.html|license\.txt)$ {
    deny all;
}

However, this disables xmlrpc feature, which disa

Librechain
Librechain commented Oct 15, 2021

Asking about this since the NSA recently published guidance advising the public and private sectors to transition to cryptographic algorithms that are no less than sha384 & ec384 (elliptic curves).

While Edwards' Curves are different, its worth noting that prior to this update sha256 & secp256k1 were both on the list of acceptable cryptographic algorithms. My deduction was that 128-bit securit

kcq
kcq commented Jan 4, 2022

You might have a compose file that doesn't reference the exact version of the container image you want to minified (e.g., the target service might reference the latest tag and you want to minify v1.2.3 for your target image).

The --target-compose-svc-image command parameter (for build and profile commands) should provide a way to use the desired image version without having to rewrite

Wikipedia
Wikipedia

Security apps

GitProtect.io Backup

Automatic, daily repo and metadata backup - no maintenance needed: fast restore, DR, AWS, and S3 cloud storage support

GuardRails

GuardRails provides continuous security feedback for modern development teams

Semgrep

Code scanning at ludicrous speed. Find bugs, apply guardrails across your repos, and get feedback in PRs, Slack, or email

Renovate

Keep dependencies up-to-date with automated Pull Requests

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

LGTM

Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

BackHub Backups by Rewind

Backup your GitHub repos & metadata automatically. Get daily backups that can be restored in seconds – AWS storage available

WhiteSource Bolt

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

See more Security apps