From 56c13461f6820cc64e5ca31bcf33bcaefc4e975d Mon Sep 17 00:00:00 2001 From: "David A. Wheeler" Date: Tue, 8 Oct 2024 11:23:42 -0400 Subject: [PATCH] Unassign labs for hardcoded credentials and XSS These tier-1 labs had been assigned, but I haven't heard from the assignees for over a month, even after repeated requests. So I'm unassigning these specific labs. I presume that other tasks have (unfortunately) had to take priority. That happens. It's possible they had a more serious problem, e.g., a medical issue; if so, we hope they're okay! I hope they'll be able to rejoin this effort at some future time. Signed-off-by: David A. Wheeler --- docs/labs/README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/labs/README.md b/docs/labs/README.md index c94d6946..fea768e9 100644 --- a/docs/labs/README.md +++ b/docs/labs/README.md @@ -89,7 +89,7 @@ work on. * Processing Data Securely * Processing Data Securely: General Issues * [Prefer Trusted Data. Treat Untrusted Data as Dangerous](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#prefer-trusted-data-treat-untrusted-data-as-dangerous) - PLANNED-2 UNASSIGNED - * [Avoid Default & Hardcoded Credentials](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#avoid-default--hardcoded-credentials) - PLANNED-1 ([Josetic224 SophiaUgo](https://github.com/cncf/tag-security/issues/1335)) + * [Avoid Default & Hardcoded Credentials](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#avoid-default--hardcoded-credentials) - PLANNED-1 UNASSIGNED * [Avoid Incorrect Conversion or Cast](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#avoid-incorrect-conversion-or-cast) - DONE-2 (Keith Grant via Vincent Danen, by 2024-07-26) [conversion](conversion.html) * Processing Data Securely: Undefined Behavior / Memory Safety * Countering Out-of-Bounds Reads and Writes (Buffer Overflow) - DONE-0 [oob1](oob1.html) @@ -113,7 +113,7 @@ work on. * Countering Denial-of-Service (DoS) Attacks - PLANNED-2 UNASSIGNED * Sending Output * [Introduction to Sending Output](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#introduction-to-sending-output) - PLANNED-2 UNASSIGNED - * [Countering Cross-Site Scripting (XSS)](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#countering-cross-site-scripting-xss) - PLANNED-1 [Josetic224 SophiaUgo](https://github.com/cncf/tag-security/issues/1335) + * [Countering Cross-Site Scripting (XSS)](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#countering-cross-site-scripting-xss) - PLANNED-1 UNASSIGNED * Content Security Policy (CSP) - DONE-0 [csp1](csp1.html) * Other HTTP Hardening Headers - (probably continue csp1) PLANNED-2 UNASSIGNED * [Cookies Cookies & Login Sessions Login Sessions](https://github.com/ossf/secure-sw-dev-fundamentals/blob/main/secure_software_development_fundamentals.md#cookies--login-sessions) - PLANNED-2 (Dhananjay Arunesh via Vincent Danen)