[SAC] [OSGeo] #2008: FOSS4G 2018 Registration Page SSL
OSGeo
trac_osgeo at osgeo.org
Thu Feb 15 12:29:16 PST 2018
#2008: FOSS4G 2018 Registration Page SSL
----------------------------+---------------------
Reporter: markiliffe | Owner: martin
Type: task | Status: new
Priority: major | Milestone:
Component: Systems Admin | Resolution:
Keywords: foss4g2018 ssl |
----------------------------+---------------------
Comment (by TemptorSent):
It appears that the actual payment processing page is loaded within an
iframe on the foss4g site, which could allow an attacker to expose credit
card information using javascript. Please audit this and preferably
redirect to the external payment processor directly.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2008#comment:7>
OSGeo <http://www.osgeo.org/>
OSGeo committee and general foundation issue tracker.
More information about the Sac
mailing list