HidServAuth token on journalist interface implemented
MITIG3 · Implemented: In place. · Defined in mitigations.py:20
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Session management vulnerability in Journalist interface THREAT7 | mitigated | 6 medium | 6 medium |
| Malicious input vulnerability in Journalist interface THREAT8 | mitigated | 6 medium | 6 medium |
| Known vulnerabilities in Tor (incl. Onion Service cryptography, authentication) THREAT35 | mitigated | 6 medium | 6 medium |
| Journalist interface is framed THREAT33 | mitigated | 6 medium | 3 low |