imr-framework/vs-tabletop

Virtual Scanner Tabletop Web Application

imr-framework

vs-tabletop's Issues

Unused packages in distribution

WIndows 10 OS

There are multiple packages like torch, tensorflow (and related) libraries that are part of the distribution. This makes the pypi package heavy and unwieldy in low bandwidth installation scenarios. Can this distributable be made as light as possible?

login fail

im using chrome to access the games
i have to register eachtime while accessing the games(after closing the browser),i use the same username and password but still fails

Hardcoded secret key

Hello,

We are a cybersecurity research group from the CISPA Helmholtz Center for Information Security and Ca’ Foscari University of Venice. We recently conducted an analysis of the session management used in your web application as part of our research. We have discovered a security vulnerability that we believe requires your attention.

Vulnerability Description:

After our analysis, we have identified that your application is using a hard-coded secret key that is leaked through GitHub. If operators who install your web application do not change this secret key, they are vulnerable to cookie forgeries. The cookie forgery attack allows an attacker, knowing the key used to sign a cookie, to forge new arbitrary cookies to impersonate and take over other accounts.

link to the relevant code part

Recommendation for Mitigation:

To address this vulnerability and enhance the security posture of your web application, we highly recommend setting the secret key from an environment variable. If the environment file is not shared on GitHub then this would force operators of your application to create their own key upon installation, forcing them to set their own secure secret key.

We hope this notification helps improve your security. Can you take a look into the relevant code parts and comment on the issue?

bdist_wheel, kiwisolver on Windows10

Error:

"oython setup.py bdist_wheel did not run successfully.
exit code 1
ERROR: failed building wheel for kiwisolver"