Fix XSS, CSRF, rate limitation , clickjacking vulnerabilities in Dspace ver 6.0 software
Budget: ₹12,500 – ₹37,500 INR
I am looking for someone who can fix the following vulnerabilities in a simple Document Management Software on Java based open source D Space Version 6.0
1. Stored XSS - Cross-site scripting (also known as XSS) is a web security vulnerability which occurs when a malicious script is injected directly into a vulnerable web application cause of input validation.
2. Reflected XSS -- Reflected XSS is one of the part of Cross-Site-Scripting attacks and termed as “Non-Persistence XSS” or “Type II”.
3 Rate Limiting- number of wrong login attempts to be limited to 3 & then 15 mins wait
4. CSRF- cross site request forgery- The most effective way to protect against CSRF vulnerabilities requests an additional token that is not transmitted in a cook in a hidden form field
5. Click jacking -
1. Stored XSS - Cross-site scripting (also known as XSS) is a web security vulnerability which occurs when a malicious script is injected directly into a vulnerable web application cause of input validation.
2. Reflected XSS -- Reflected XSS is one of the part of Cross-Site-Scripting attacks and termed as “Non-Persistence XSS” or “Type II”.
3 Rate Limiting- number of wrong login attempts to be limited to 3 & then 15 mins wait
4. CSRF- cross site request forgery- The most effective way to protect against CSRF vulnerabilities requests an additional token that is not transmitted in a cook in a hidden form field
5. Click jacking -