1
π Feature: Web Security Scanners
Source: appwrite/appwrite#11517 · opened by @stnguyen90
π Feature description
Since you are already running an Antivirus, here is another suggestion: Web security scanners. Like skipfish. Like the w3af. Like dictionary / word list attacks. Like Nexpose of Rapid7. Those could be scheduled or manually run web application security audits.
π€ Pitch
this is the least pressing idea, since we assume the Appwrite code to be well audited after review, and consideration of the salted hashing algorithm, but noonetheless, the API key privileges and DB docs protection might yield a lot of unwanted leaks, that are automatically detectable by these scanners.
π Have you spent some time to check if this issue has been raised before?
β’ I checked and didn't find similar issue
π’ Have you read the Code of Conduct?
β’ I have read the [Code of Conduct](
_Originally posted by @zdanl in
Since you are already running an Antivirus, here is another suggestion: Web security scanners. Like skipfish. Like the w3af. Like dictionary / word list attacks. Like Nexpose of Rapid7. Those could be scheduled or manually run web application security audits.
π€ Pitch
this is the least pressing idea, since we assume the Appwrite code to be well audited after review, and consideration of the salted hashing algorithm, but noonetheless, the API key privileges and DB docs protection might yield a lot of unwanted leaks, that are automatically detectable by these scanners.
π Have you spent some time to check if this issue has been raised before?
β’ I checked and didn't find similar issue
π’ Have you read the Code of Conduct?
β’ I have read the [Code of Conduct](
_Originally posted by @zdanl in
No pledges yet. Be the first to back this.
Comments
Similar requests
π Feature: Needed Documnet level security restriction based on its attribute value or relative query which returns true, like in supabase
13 votes · 0 comments
π Enhancement: Enhance Appwrite security by running the containers as a unprivileged (non-root) user
0 votes · 0 comments
π Enhancement: Switch from Imagemagick to libvips (better performance/memory usage/security)
5 votes · 0 comments
Let's talk about Appwrite's permissions
7 votes · 0 comments
[Discussion] Which OAuth providers need more configuration?
1 vote · 0 comments
No comments yet.