Search results

[CRITICAL] Endpoint /api/token Dapat Diakses Tanpa Autentikasi

Status: Open.

#974 In OpenSID/OpenKab;

· Revanza1106 opened on Mar 8, 2026

[SECURITY] Terapkan CAPTCHA pada Login & Endpoint Auth untuk Batasi Bot/Bruteforce

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#969 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

·  

M1 OpenKab 2604

[SECURITY] Jadikan Content Security Policy (CSP) Selalu Aktif, Tidak Boleh Auto-Disable Walau di Debug/Dev

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#968 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

·  

M2 OpenKab 2604

[SECURITY] Proteksi .env & Konfigurasi Variabel Lingkungan (Sensitive Information Exposure)

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#967 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Prevent IDOR (Insecure Direct Object Reference) pada Endpoint Berbasis ID

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#966 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

·  

M2 OpenKab 2604

[SECURITY] Token API Harus Expire & Support Rotasi/Revocation

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#965 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Konfigurasi CORS Lebih Ketat - Whitelist Origin Saja

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#964 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Enforce Strong Password Policy di Seluruh Fitur (Change/Reset/Registration)

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#963 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Sanitasi Konten HTML dan Fix XSS pada Field Dynamic di Template/Output

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#962 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Audit dan Refactor Raw SQL Query – Parameter Binding Wajib!

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#961 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Perbaikan & Hardening Validasi File Upload untuk Cegah Webshell/RCE

Status: Open.

#959 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

SECURITY] Perbaikan Stored XSS di Rich Text Editor

Status: Open.

#958 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026