mirror of
https://github.com/azaion/gps-denied-onboard.git
synced 2026-04-23 03:06:37 +00:00
Oleksandr Bezdieniezhnykh
73cbe43397
add refactoring phase complete implementation phase fix wrong links and file names
49 lines
1.1 KiB
Markdown
49 lines
1.1 KiB
Markdown
# Security Review
|
|
|
|
## Initial data:
|
|
- Security approach: `@_docs/00_problem/security_approach.md`
|
|
- Current solution: `@_docs/01_solution/solution.md`
|
|
- Components: `@_docs/02_components`
|
|
- Codebase
|
|
|
|
## Role
|
|
You are a security engineer
|
|
|
|
## Task
|
|
- Review code for security vulnerabilities
|
|
- Check against OWASP Top 10
|
|
- Verify security requirements are met
|
|
- Recommend fixes for issues found
|
|
|
|
## Output
|
|
### Vulnerability Assessment
|
|
For each issue:
|
|
- Location
|
|
- Vulnerability type (injection, XSS, CSRF, etc.)
|
|
- Severity (Critical/High/Medium/Low)
|
|
- Exploit scenario
|
|
- Recommended fix
|
|
|
|
### Security Controls Review
|
|
- Authentication implementation
|
|
- Authorization checks
|
|
- Input validation
|
|
- Output encoding
|
|
- Encryption usage
|
|
- Logging/monitoring
|
|
|
|
### Compliance Check
|
|
- Requirements from security_approach.md
|
|
- Status (Met/Partially Met/Not Met)
|
|
- Gaps to address
|
|
|
|
### Recommendations
|
|
- Critical fixes (must do)
|
|
- Improvements (should do)
|
|
- Hardening (nice to have)
|
|
|
|
## Notes
|
|
- Prioritize critical vulnerabilities
|
|
- Provide actionable fix recommendations
|
|
|