Move SecureDrop to a compiled, memory-safe language like Rust to reduce likelihood of code injection/modification proposed
MITIG175 · Proposed: Not in place yet. Being considered. · Defined in mitigations.py:524
Threats it mitigates
No threat lists this mitigation.
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Unknown vulnerabilities in Python or libraries used by SecureDrop THREAT38 | accepted | 6 medium | 6 medium |