Cyberwatching Project Radar Beta 3 (v0.7.3)
Pre-release
Pre-release
A new point release for the Cyberwatching project radar - beta 3.
This release mostly focused on improving security, addressing XSS, CSRF, proper CORS handling and secure JWT management for AuthN and AuthZ.
New feature(s):
- Errors are now logged in a separate error.log file on the server
Security
- #33 Logging in is now hardened against NoSQL attacks
- CORS configuration clamped down to specific paths in the API
- JWT payload is now encrypted, making it impossible for attackers to exploit it without the server-side encryption key
- Browser cookie hardened against CSRF attacks
- HTTPS is now mandatory - the server will not work without it.
Improvement(s):
- #36 The server integrates with Google Analytics if configured to do so
Bugfix(es):
- #32 Redesign of MTRL score graph to avoid edge cases causing overlapping max/min score with median
- #37 Layout of the filter section (incl. search) now prevents the clear button to flow into a second line
- #31 The JRC Taxonomy filter tags display now has a defined maximum size; to show all tags hover the mouse over it.