Git Product home page Git Product logo

epfl-evoting's Introduction

Student 18 Evoting

This repository contains the source for e-voting frontend (with authentication server) and other code used for load testing the evoting service

epfl-evoting's People

Contributors

dependabot[bot] avatar gnarula avatar ineiti avatar jeffallen avatar pascalinde avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

epfl-evoting's Issues

test cases 06/23

The release v3.4.10 removes the upper bound of 9 on the maxChoice.

  • create a new election with 20 candidates and each of the following maxChoices: 4, 9, 10, 20
    • also add some other SCIIPERs for testing, as it cannot be finalized with only one vote: 111443 (@ineiti), 376842 (@PascalinDe)
  • add vote with 0, 4, 9, 10, 20 (up to maxChoices) candidates
  • vote multiple times
  • finalize election
  • check results in interface
  • check results in CSV

footer hides "Vote" button for large number of candidates

cf. this issue vuetifyjs/vuetify#11121

(the problem is that the position of the footer is calculated before the dynamic content has been loaded)

the quick-and-dirty solution for the 30th of June vote was to remove the footer altogether, the proper long term solution is to update the application to the latest version of Vuetify where this bug is fixed

getLdapData is susceptible to a "ldap-query" injection attack

getLdapData does not validate it's input, and then puts it into an LDAP query:

const getLdapData = (sciper) => {
  const client = new LdapClient({ url: `ldap://${config.ldap.hostname}` })

  const opts = {
    filter: '(&(objectClass=person)(uniqueIdentifier=' + sciper + '))',
    scope: 'sub',
    attributes: ['uniqueIdentifier', 'memberOf', 'dn', 'displayName']
  }

  const base = 'o=epfl, c=ch'

  return client.search(base, opts)
}

If the input sciper is not a positive integer, it should throw an error. The LDAP query should be built with format, and sciper (after being converted to an int) should be put into the string with %d.

(Thanks to Solal Pirelli for this report.)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.