Task55Start - Protect Remo Demo Site

See TasksExplained? for more infos about tasks. This task is based on the template at TaskTemplateStart

Status : closed
Category : administrative
Date opened : 2007-xx-xx
Description : Protect the remo demo site from obvious attacks
Referenced in stories/tasks :
Testsuite : none
Commited revision : none

Remarks :

A whitehat was having fun with doing some xss attacks on the remo-demo site.

---

Changelog

2007-05-04 - Installed the mod-security-core-ruleset

This protects the remo demo site for the time being.

Remo has to get better input validation. Unfortunately, it is quite difficult to do it properly, as we have to accept regex input on certain fields. Basically anything could be valid for remo. Also things that look like a xss or sql injection...