Message of the day:
Common Web Platform for the New Zealand Government, need help? Ask!
Anything related to the Common Web Platform, a CMS built on Silverstripe for government
^^ That one appears in like every pentest I get to review 😄
like Secure flag on cookies
yeah, don’t need details, but there are things appearing lately, i.e. last year, this year, for new sites getting security reviewed, calling out things that were in the “default cwp codebase” for some time already
I don't think that is information that should be shared @MichalKleiner.
@thats4shaw has joined the channel
I mean on behalf of DIA, not a project level testing
they went quite deep
I’m wondering what level of scrutiny the whole cwp recipe/stack received in this regard