PatchWork AutoFix

[CTY-git]

This pull request from patched fixes 35 issues.

---

• File changed: introduction/views.py
  Fix Django cookie security vulnerabilities

  Set secure=True, httponly=True, and samesite='Lax' while setting the session_id cookie.
  Fix Django cookie security misconfiguration

  Set secure=True, httponly=True, and samesite='Lax' when setting the auth_cookie in the response.
  Fix Django cookie security vulnerabilities

  Set secure=True, httponly=True, and samesite='Lax' when setting the cookie in both GET and POST requests.
  Replace MD5 password hashing with a secure password hashing function

  Replaced the usage of MD5 password hashing with hashlib.scrypt for secure password hashing.
  Fix vulnerability by sanitizing user input in ssti_lab view

  Sanitized user input before writing it into the file in the ssti_lab view to prevent potential server-side template injection vulnerability.
  Mitigate SSRF vulnerability in ssrf_lab2 function

  Added validation to check if the URL is in an allowlist before making the external request.
  Fix path traversal vulnerability by using os.path.abspath

  Replaced os.path.join with os.path.abspath to secure the file path by getting the absolute path.
  Fixed SQL injection vulnerability

  Revised the SQL query to use parameterized query to prevent SQL injection vulnerability.
  Fix insecure deserialization vulnerability

  Replaced the usage of insecure deserialization method yaml.load with the safer alternative yaml.safe_load
  Fix vulnerability in cmd_lab2 function

  Replaced the use of eval() with a safer alternative to prevent code injection vulnerability.
  Fix command injection vulnerability in cmd_lab function

  Replaced the subprocess.Popen call to use shell=False to prevent command injection vulnerability.
  Fix XSS vulnerability by using Django's template engine for rendering HTML

  Replaced direct rendering of HTML with Django's template engine to prevent XSS vulnerability
  Fix XSS vulnerability and improve Django cookie security

  Used Django's template engine to render HTML instead of directly using 'HttpResponse' to prevent XSS vulnerabilities. Set secure=True, httponly=True, and samesite='Lax' for Django cookies in 'response.set_cookie' to enhance security.
  Fix XSS and insecure cookie handling in auth_lab_signup

  Used Django's template engine to render HTML securely instead of directly using HttpResponse. Set secure=True, httponly=True, and samesite='Lax' for the cookie in response.set_cookie().
  Fix insecure deserialization vulnerability

  Set secure=True, httponly=True, and samesite='Lax' in response.set_cookie()
  Fix SQL injection vulnerability in sql_lab function

  Replaced the manual SQL query construction with parameterized query to prevent SQL injection vulnerability.

• File changed: introduction/mitre.py
  Fix 'subprocess' function 'Popen' shell parameter vulnerability

  Changed the 'shell=True' parameter to 'shell=False' in the subprocess.Popen function call.
  Fix code injection vulnerability by removing eval()

  Replaced eval() with a safe alternative to prevent code injection vulnerability.
  Fix hard-coded secret in csrf_transfer_money_api

  Replaced the hard-coded secret 'csrf_vulneribility' with a secure method to store and access the secret.
  Fix hard-coded secret in csrf_transfer_money function

  Replaced the hard-coded secret 'csrf_vulneribility' with a more secure method of handling sensitive data.
  Fix vulnerability by updating hash function from MD5 to hashlib.scrypt and removing hardcoded JWT secret.

  Replaced the usage of MD5 hash function with hashlib.scrypt for password hashing. Removed hardcoded JWT secret 'csrf_vulnerability' and updated how the JWT payload is encoded.

• File changed: introduction/apis.py
  Fix vulnerability by sanitizing user input before writing to file

  Sanitized user input before writing it to a file to prevent potential malicious file operations.
  Fix vulnerability by sanitizing user-controlled input before writing to files

  Sanitized the user-controlled input before writing to files to prevent potential malicious activities.

• File changed: docker-compose.yml
  Add security configurations to prevent privilege escalation and ensure filesystem integrity

  Added 'no-new-privileges:true' in 'security_opt' for services 'db', 'web', and 'migration'. Added 'read_only: true' for services 'db', 'web', and 'migration' to prevent malicious activities.

• File changed: introduction/playground/A9/api.py
  Remove @csrf_exempt decorator from log_function_target

  Removed @csrf_exempt decorator from the log_function_target function to ensure that CSRF token is checked for this route.

• File changed: introduction/playground/A9/archive.py
  Remove @csrf_exempt decorator to prevent CSRF vulnerability

  Removed @csrf_exempt decorator from the log_function_target function to prevent CSRF vulnerability.

• File changed: introduction/static/js/a9.js
  Fix XSS vulnerability by sanitizing user-controlled data before inserting into the DOM

  Sanitized user-controlled data before inserting it into the DOM to prevent XSS vulnerabilities.

• File changed: introduction/templates/Lab/A9/a9_lab.html
  Fix CSRF vulnerability in A9 template

  Added csrf_token to the form in the Django template to prevent CSRF attacks.

• File changed: introduction/templates/Lab/BrokenAccess/ba_lab.html
  Add csrf_token to the login form

  Added csrf_token to the form in the Django template to prevent CSRF attacks.

• File changed: introduction/templates/Lab/BrokenAuth/otp.html
  Add csrf_token to prevent CSRF attacks

  Added csrf_token to the forms in the Django template to prevent CSRF attacks.

• File changed: introduction/templates/Lab/CMD/cmd_lab.html
  Fix CSRF vulnerability in manual form creation

  Added {% csrf_token %} tag to the manual form in the template to prevent CSRF attacks.

• File changed: introduction/templates/Lab/CMD/cmd_lab2.html
  Fix CSRF vulnerability in manually-created form

  Added csrf_token to the form in the template to prevent CSRF attacks.

• File changed: introduction/templates/Lab/XSS/xss_lab_3.html
  Prevent Cross-Site Scripting (XSS) vulnerability by properly handling template variable in script tag

  Escaped the template variable within the script tag to prevent Cross-Site Scripting (XSS) vulnerability

• File changed: introduction/templates/Lab_2021/A1_BrokenAccessControl/broken_access_lab_1.html
  Fix CSRF vulnerability in login form

  Added {% csrf_token %} tag in the form to prevent CSRF attacks.

• File changed: introduction/templates/Lab_2021/A1_BrokenAccessControl/broken_access_lab_2.html
  Fix CSRF vulnerability by adding csrf_token to the form.

  Added {% csrf_token %} to the form in the Django template to prevent CSRF attacks.