開發、系統安全文檔

記錄下，之後作解決方案參考~

GlobaLeaks Application Security

Design and Details

Goal

Introduction

Key concepts

Tip

Receiver interactions

Whistleblower interactions

Tip elements

Authentication

Authentication Matrix

Authentication Methods

Password

Receipt

Technical Implementation

Receipt

Password

Bruteforce protection

Password Security

Password Strength

Password Lockout

Password Recovery (Not yet implemented)

Password Storage

Web Application Security

Session Management

XSRF Prevention

Input Validation (Server)

(File) Content-Type Validation

Input Validation (Client)

CORS Security

Enhanced HTTP Security Header

HTTP Link Referrer Privacy

Crawlers Policy

DoS resiliency approach

Delivery task

Cleaning task

Notification task

File encryption

Related Project Documentation

Operating system security

https://github.com/globaleaks/GlobaLeaks/wiki/Operating-system-security

Security Advice for Whistleblowers

https://docs.google.com/document/d/1ZrndvBj9eTg-ooIRfKbXxX18Ie-ODlcjnHjKXSY78Ew/pub

Cookie：

一鍵查看內網IP地址：http://net.ipcalf.com/