Skip to content
This repository has been archived by the owner on Apr 9, 2024. It is now read-only.

Bring up to date with base. #1

Open
wants to merge 2,686 commits into
base: master
Choose a base branch
from
Open

Conversation

bonds0097
Copy link

I want to bring this up to date with the base repo before I diverge like a mofo.

tghosth and others added 30 commits October 31, 2024 08:25
… protection (#2209)

* Resolve #1658 by removing 6.1.3 and merging 6.1.1 and 6.1.2 into data protection

* Merge into protection levels requirement

* remove chapter text for cleaned up chapter

---------

Co-authored-by: Elar Lang <47597707+elarlang@users.noreply.github.com>
…2218)

* Update 0x18-V10-Coding.md

Issue #2145

* Update 0x18-V10-Coding.md

* Update 0x18-V10-Coding.md

* Include in recommendations

---------

Co-authored-by: Elar Lang <47597707+elarlang@users.noreply.github.com>
Co-authored-by: Josh Grossman <tghosth@users.noreply.github.com>
* Add forwardsec and omegapoint as tertiary

* Change layout

* Fix layout

* moar space
* Update 0x18-V10-Coding.md

#1471

* Update 0x18-V10-Coding.md

Small change

* Update 0x18-V10-Coding.md

* Update 0x18-V10-Coding.md

* wqd

---------

Co-authored-by: Jim Manico <jim@manicode.com>
Co-authored-by: Josh Grossman <tghosth@users.noreply.github.com>
* Update 0x20-V12-Files-Resources.md

relating to issue #2224

* Clarify section wording

* Update 0x20-V12-Files-Resources.md

---------

Co-authored-by: Josh Grossman <tghosth@users.noreply.github.com>
The initial version was ambitious.
Changed "3rd party" to "third-party"
Changed 3rd party to third-party
* Update 0x11-V2-Authentication.md

Addressing #2220

* Update 0x11-V2-Authentication.md

---------

Co-authored-by: Josh Grossman <tghosth@users.noreply.github.com>
removed requirement:
V12.3.6 Verify that the application does not include and execute functionality from untrusted sources, such as unverified content distribution networks, JavaScript libraries, node npm libraries, or server-side DLLs. | | ✓ | ✓ | 829 |

With duplicate of we should point to v4.0.3 requirements:
* V14.2.3 Verify that if application assets, such as JavaScript libraries, CSS or web fonts, are hosted externally on a Content Delivery Network (CDN) or external provider, Subresource Integrity (SRI) is used to validate the integrity of the asset.
* V14.2.4 Verify that third party components come from pre-defined, trusted and continually maintained repositories.
Elar Lang and others added 30 commits December 11, 2024 13:27
* Adding clarification on crypto discovery tools to resolve #2395

* Clarify wording
* Clarify req 2.3.4 to resolve #2460

* Reword around "verify that"

* Clarifications

* whitespace

---------

Co-authored-by: Elar Lang <47597707+elarlang@users.noreply.github.com>
* Add verify that to various reqs to resolve #2469

* modification labels

* modification labels

---------

Co-authored-by: Elar Lang <47597707+elarlang@users.noreply.github.com>
* Start improvements

* continue text update

* linting

* Continue improving text on levels and testing

* linting

* Update 0x03 and move 4.0 related content to 0x05

* Wrong word

* Add better level definition

* Linting
* Update V3 chapter/section text for 2442

* rm trailing spaces

* Minor modifications to wording

---------

Co-authored-by: Elar Lang <47597707+elarlang@users.noreply.github.com>
Co-authored-by: Josh Grossman <tghosth@users.noreply.github.com>
…ents (#2489)

* Resolve #2467 by splitting and clarifying the 3rd party vuln requirements

* tag fix

---------

Co-authored-by: Elar Lang <47597707+elarlang@users.noreply.github.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

9 participants