diff --git a/SECURITY_AUDIT.md b/SECURITY_AUDIT.md index 6b708ba..12b8c50 100644 --- a/SECURITY_AUDIT.md +++ b/SECURITY_AUDIT.md @@ -81,4 +81,4 @@ This section provides a detailed walkthrough of the audit process, mirroring the | **High** | **Excessive Docker Socket Permissions** | A choice must be made: 1) Accept the risk and use `EXEC=1` for functionality, or 2) Migrate to a different socket proxy that supports command whitelisting to mitigate the risk. | | **Medium** | **Stored Cross-Site Scripting (XSS)** | Use a library like `bleach` to sanitize the HTML generated from Markdown files before rendering in the `help.html` template. | | **Low** | **Encryption Key Stored on Filesystem** | For higher security, supply the encryption key at runtime via Docker secrets or an external secrets manager instead of storing it as a file. | -| **Info** | **Insecure Temporary Credential Storage** | This is a minor issue with no direct recommendation, but be aware that credentials exist in a readable (though tamper-proof) form in the session cookie during setup. | \ No newline at end of file +| **Info** | **Insecure Temporary Credential Storage** | This is a minor issue with no direct recommendation, but be aware that credentials exist in a readable (though tamper-proof) form in the session cookie during setup. | diff --git a/docker-compose.yml b/docker-compose.yml index 862178d..168bf34 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -77,4 +77,4 @@ networks: name: cloudflare-net external: true dockflare-internal: - name: dockflare-internal \ No newline at end of file + name: dockflare-internal