Escape content in the SecureDrop Client (https://github.com/freedomofpress/securedrop-client/issues/160) proposed
MITIGQW17 · Proposed: Not in place yet. Being considered. · Defined in mitigations.py:831
Not applied yet. The spreadsheet's answer to "Should we apply?" is Yes.
Threats it mitigates
No threat lists this mitigation.
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Injection vulnerability in securedrop-client THREATQW9 | mitigated | 9 high | 2 low |