Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

plan to handle security #212

Open
hamedpro opened this issue Jul 14, 2023 · 2 comments
Open

plan to handle security #212

hamedpro opened this issue Jul 14, 2023 · 2 comments
Labels
backend this is related to something API or server frontend just helping developers find what they're more likely be able to do

Comments

@hamedpro
Copy link
Owner

there are many things to care in terms of security :

  • end to end encryption of users files and data, so system itself will not be able to read the transactions or decrypt files.
  • regular kinds of vulnerability like XSS and ...
@hamedpro hamedpro added backend this is related to something API or server frontend just helping developers find what they're more likely be able to do labels Jul 14, 2023
@hamedpro
Copy link
Owner Author

network protection is already being done here : #41

@hamedpro hamedpro modified the milestone: v1 Jul 14, 2023
@hamedpro
Copy link
Owner Author

  • add email changing func and dont forget to verify user before submitting changes (also add more limits to new transaction : for example user can not change his email without verifying that email.)

  • don't use unauthenticated email or phone number to login through sending a verification code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backend this is related to something API or server frontend just helping developers find what they're more likely be able to do
Projects
Status: 📋 Backlog
Development

No branches or pull requests

1 participant