Security (BanHandler / gitlab secret key)
Khaaz opened this issue · 0 comments
Khaaz commented
Roadmap v3 - Security
Overview
- Gitlab token check (secret auth token) seems to be passed directly with no encoding. This should be checked out. (Github token in opposite seems to need a better crypto match..)
- IPBanHandler could use a better implementation (cleanup / optimisation) especially for saving to json. This should also probably be delegated to an additional manager.