Khaaz/Discord-GitHook

Security (BanHandler / gitlab secret key)

Khaaz opened this issue · 0 comments

Khaaz commented

Roadmap v3 - Security

Overview

  • Gitlab token check (secret auth token) seems to be passed directly with no encoding. This should be checked out. (Github token in opposite seems to need a better crypto match..)
  • IPBanHandler could use a better implementation (cleanup / optimisation) especially for saving to json. This should also probably be delegated to an additional manager.