Skip to content

Companion frontend suit #2026

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
suvroc wants to merge 7 commits into
base: master
Choose a base branch
from
Open

Companion frontend suit #2026

suvroc wants to merge 7 commits into from
+183 −0

Conversation

@suvroc
Copy link
Contributor

@suvroc suvroc commented Jan 12, 2026

Frontend Companion suit definition

suvroc added 2 commits January 13, 2026 00:38
@suvroc
Add new frontend attack cards to YAML file
81447e9
@suvroc
Add Cloud card entries to companion mappings
bd3c728 
Added multiple entries for Cloud cards with various attributes.
@sydseter
Copy link
Collaborator

sydseter commented Jan 13, 2026

Great, I'll have a llok at it.

sydseter
sydseter reviewed Jan 13, 2026
View reviewed changes
Copy link
Collaborator

@sydseter sydseter left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@suvroc Thank you so much for your excellent contributions. I have added some comments. @cw-owasp will be back next week and I'll keep it open until he also have had a look.

suvroc added 4 commits January 13, 2026 16:51
@suvroc
Update descriptions for FRE2, FRE3, FRE6
d3c4cd6
@suvroc
Refactor card attributes and rename 'Cloud' to 'Frontend'
4e9c9e7 
Updated the name from 'Cloud' to 'Frontend' and modified various attributes for FRE2, FRE3, FRE6, and FRE7 cards.
@suvroc
Enhance FRE7 description with additional vulnerabilities
b4e2aa3 
Expanded the description for FRE7 to include additional client-side security vulnerabilities.
@suvroc
Revise FREK card description
f44d494 
Updated description for the FREK card to reflect new details about the attacker's method.
@suvroc
Copy link
Contributor Author

suvroc commented Jan 13, 2026

Which type of subject in the sentence is better:
The attacker can access sensitive data
or
John can access sensitive data

@sydseter
Copy link
Collaborator

sydseter commented Jan 13, 2026

Which type of subject in the sentence is better: The attacker can access sensitive data or John can access sensitive data

We’ll had names later. Our idea was to use names from OWASP project leaders and core contributors.

@sydseter
Copy link
Collaborator

sydseter commented Jan 15, 2026

Never mind the build failure. It's related to the branch getting merge coming from a fork.

@sydseter sydseter mentioned this pull request Jan 15, 2026
Merged
@sydseter sydseter mentioned this pull request Jan 16, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sydseter sydseter sydseter approved these changes

@cw-owasp cw-owasp Awaiting requested review from cw-owasp cw-owasp is a code owner

@rewtd rewtd Awaiting requested review from rewtd rewtd is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@suvroc @sydseter