Skip to content

Cyberwatching Project Radar Beta 3 (v0.7.3)

Pre-release
Pre-release
Compare
Choose a tag to compare
@micheldrescher micheldrescher released this 08 Dec 11:45
· 62 commits to master since this release

A new point release for the Cyberwatching project radar - beta 3.

This release mostly focused on improving security, addressing XSS, CSRF, proper CORS handling and secure JWT management for AuthN and AuthZ.

New feature(s):

  • Errors are now logged in a separate error.log file on the server

Security

  • #33 Logging in is now hardened against NoSQL attacks
  • CORS configuration clamped down to specific paths in the API
  • JWT payload is now encrypted, making it impossible for attackers to exploit it without the server-side encryption key
  • Browser cookie hardened against CSRF attacks
  • HTTPS is now mandatory - the server will not work without it.

Improvement(s):

  • #36 The server integrates with Google Analytics if configured to do so

Bugfix(es):

  • #32 Redesign of MTRL score graph to avoid edge cases causing overlapping max/min score with median
  • #37 Layout of the filter section (incl. search) now prevents the clear button to flow into a second line
  • #31 The JRC Taxonomy filter tags display now has a defined maximum size; to show all tags hover the mouse over it.