Zen

Translation

English type: Plain text
Repomaker is a web tool to make it really easy to set up your own F-Droid repositories. It is a new project that should still be considered beta. There was one issue with high severity ([CVE-2018-7753](https://nvd.nist.gov/vuln/detail/CVE-2018-7753)) found in an upstream library, Mozilla's [_bleach_](https://github.com/mozilla/bleach). It was reported to Mozilla and promptly fixed. There were three other low impact findings which have been fixed.
478/4550 · 455

Sign in to save the translation.

English Spanish Actions
Ideally, the index generation process in `fdroid update` would have robust CSS/HTML/Javascript checks so malicious injection is prevented by both the index providers and consumers. This would increase the "herd immunity" of everyone working with data generated using any of the F-Droid tools.
 
[4.1.37 OTF-037 — Untrusted External Links]({{ site.baseurl }}/docs/Second_Audit_Report/#f38-untrusted-external-links)
 
The links are only displayed in the "Links" section. Since there is a human review of those URLs, and those URLs are committed to git, we have left those to be open without validation. There are also other URLs like home page, issue tracker, etc. I suppose we should show the full URL in the UI if they don't match a well known pattern. Google Play also includes a link to a website that the app author provides.
 
One idea for improvement here would be to scan these URLs with the Google Safe Browsing API.
 
Repomaker
Repomaker
Repomaker is a web tool to make it really easy to set up your own F-Droid repositories. It is a new project that should still be considered beta. There was one issue with high severity ([CVE-2018-7753](https://nvd.nist.gov/vuln/detail/CVE-2018-7753)) found in an upstream library, Mozilla's [_bleach_](https://github.com/mozilla/bleach). It was reported to Mozilla and promptly fixed. There were three other low impact findings which have been fixed.
Repomaker es una herramienta web para hacer realmente fácil configurar tus propios repositorios F-Droid . Es un nuevo proyecto que aún debiese considerarse beta. Se hayó un error con alta severidad ([CVE-2018-7753](https://nvd.nist.gov/vuln/detail/CVE-2018-7753))
encontrado en una librería ...... , de Mozilla [_bleach_](https://github.com/mozilla/bleach). Fue reportado a Mozilla y rápidamente corregido. Existían otros tres hallazgos de bajo impacto que se han corregido.
[4.1.1 OTF-001 — Evasion of Bleach Sanitizer in Repomaker]({{ site.baseurl }}/docs/Second_Audit_Report/#f8-evasion-of-bleach-sanitizer-in-repomaker)
 
[4.1.29 OTF-029 — Tabnabbing in Repomaker]({{ site.baseurl }}/docs/Second_Audit_Report/#f1-tabnabbing-in-repomaker)
 
[4.1.30 OTF-030 — Repomaker:apk:_def_get_type Allows for Mime Type Mismatches]({{ site.baseurl }}/docs/Second_Audit_Report/#f9-repomaker-apk-_def_get_type-allows-for-mime-type-mismatches)
 
[4.1.31 OTF-031 — Unsafe HTML Rendering of Arbitrary Input]({{ site.baseurl }}/docs/Second_Audit_Report/#f10-unsafe-html-rendering-of-arbitrary-input)
 
Findings that are not relevant or too pedantic
 

Loading…

User avatar tortugacamaleon

Marked for edit

  1. F-Droid
  2. Website Posts
  3. Spanish
Repomaker is a web tool to make it really easy to set up your own F-Droid repositories. It is a new project that should still be considered beta. There was one issue with high severity ([CVE-2018-7753](https://nvd.nist.gov/vuln/detail/CVE-2018-7753)) found in an upstream library, Mozilla's [_bleach_](https://github.com/mozilla/bleach). It was reported to Mozilla and promptly fixed. There were three other low impact findings which have been fixed.
Repomaker es una herramienta web para hacer realmente fácil configurar tus propios repositorios F-Droid . Es un nuevo proyecto que aún debiese considerarse beta. Se hayó un error con alta severidad ([CVE-2018-7753](https://nvd.nist.gov/vuln/detail/CVE-2018-7753))
encontrado en una librería ...... , de Mozilla [_bleach_](https://github.com/mozilla/bleach). Fue reportado a Mozilla y rápidamente corregido. Existían otros tres hallazgos de bajo impacto que se han corregido.
10 months ago
User avatar tortugacamaleon

Contributor joined

  1. F-Droid
  2. Website Posts
  3. Spanish
Contributor joined 10 months ago
Browse all string changes

Things to check

Mismatching line breaks

Number of new lines in translation does not match source

Reset

Glossary

English Spanish
F-Droid F-Droid Glossary
Repomaker F-Droid Glossary

String information

Source string description
type: Plain text
Flags
md-text, priority:62, safe-html
Source string location
_posts/2018-09-04-second-security-audit-results.md
String age
5 years ago
Last updated
11 months ago
Source string age
5 years ago
Translation file
po/_posts.es.po, string 855