[SAC] [OSGeo] #2008: FOSS4G 2018 Registration Page SSL

OSGeo trac_osgeo at osgeo.org
Thu Feb 15 12:29:16 PST 2018


#2008: FOSS4G 2018 Registration Page SSL
----------------------------+---------------------
 Reporter:  markiliffe      |       Owner:  martin
     Type:  task            |      Status:  new
 Priority:  major           |   Milestone:
Component:  Systems Admin   |  Resolution:
 Keywords:  foss4g2018 ssl  |
----------------------------+---------------------

Comment (by TemptorSent):

 It appears that the actual payment processing page is loaded within an
 iframe on the foss4g site, which could allow an attacker to expose credit
 card information using javascript. Please audit this and preferably
 redirect to the external payment processor directly.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2008#comment:7>
OSGeo <http://www.osgeo.org/>
OSGeo committee and general foundation issue tracker.


More information about the Sac mailing list