Skip to content

issues Search Results · repo:stanleyhon/cse-helpme language:Python

Filter by

10 results
 (63 ms)

10 results

instanleyhon/cse-helpme (press backspace or delete to remove)

stanleyhon/cse-helpme
xmessage failing to open results in "assist" since return value is 1.

bug
  • stanleyhon
  • Opened 
    on Oct 13, 2014
  • #11

stanleyhon/cse-helpme
location=sdf@#! causes a crash.

dont know why will look at later. not real big deal
bug
  • stanleyhon
  • Opened 
    on Oct 13, 2014
  • #10

stanleyhon/cse-helpme
Stop running programs (ie xmessage) through the shell

Because notifications come from an untrusted source, use of the shell prevents a major security vulnerability. Calls to external programs should be rewritten with security in mind.
bug
  • ShannonGreen
  • Opened 
    on Oct 13, 2014
  • #9

stanleyhon/cse-helpme
provide tokens on initial signup so that users cannot spoof as other users easily

there is an issue where a person registers as a user before the real user does.
feature
  • stanleyhon
  • 3
  • Opened 
    on Oct 13, 2014
  • #8

stanleyhon/cse-helpme
Arbitrary shell command vulerability

By passing a specially constructed user or description string in a help request, arbitrary shell commands can be run on all connected clients. This could be fixed by sanitising these inputs, and/or by ...
bug
  • ShannonGreen
  • 1
  • Opened 
    on Oct 12, 2014
  • #7

stanleyhon/cse-helpme
Check HTTP request method before responding

Currently all HTTP requests are responded to, whether sent as GET or POST. It is customary for GET requests to be safe, ie should not change data on the server. POST requests are for submitting new data. ...
feature
  • ShannonGreen
  • Opened 
    on Oct 12, 2014
  • #6

stanleyhon/cse-helpme
Include argparse.py instead of argparse.pyc

The .pyc file included is causing problems on my machine, probably because I have a different version of python. We should provide the .py file.
bug
  • ShannonGreen
  • 1
  • Opened 
    on Oct 12, 2014
  • #5

stanleyhon/cse-helpme
Verify user ids with 'pp'

feature
  • stanleyhon
  • Opened 
    on Oct 12, 2014
  • #4

stanleyhon/cse-helpme
Stop users from getting notified of their own help requests

feature
  • stanleyhon
  • Opened 
    on Oct 12, 2014
  • #3

stanleyhon/cse-helpme
restrict server.py queries to CSE IPs

this should improve security very easily as it stops external users from accessing the server without a CSE login.
feature
  • stanleyhon
  • Opened 
    on Oct 12, 2014
  • #2
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue search results · GitHub