Search results

[CRITICAL] Endpoint <code>/api/token</code> Dapat Diakses Tanpa Autentikasi

Status: Open.

#974 In OpenSID/OpenKab;

· Revanza1106 opened on Mar 8, 2026

gagal export pada menu data presisi di kab-mesuji

Status: Open.

#973 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 6, 2026

[SECURITY] Terapkan CAPTCHA pada Login &amp; Endpoint Auth untuk Batasi Bot/Bruteforce

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#969 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

·  

M1 OpenKab 2604

[SECURITY] Jadikan Content Security Policy (CSP) Selalu Aktif, Tidak Boleh Auto-Disable Walau di Debug/Dev

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#968 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Proteksi .env &amp; Konfigurasi Variabel Lingkungan (Sensitive Information Exposure)

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#967 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Prevent IDOR (Insecure Direct Object Reference) pada Endpoint Berbasis ID

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#966 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Token API Harus Expire &amp; Support Rotasi/Revocation

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#965 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Konfigurasi CORS Lebih Ketat - Whitelist Origin Saja

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#964 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Enforce Strong Password Policy di Seluruh Fitur (Change/Reset/Registration)

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#963 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Sanitasi Konten HTML dan Fix XSS pada Field Dynamic di Template/Output

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#962 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Audit dan Refactor Raw SQL Query – Parameter Binding Wajib!

Audit Keamaan

bugSomething isn't workingSomething isn't working

security

Status: Open.

#961 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026

[SECURITY] Perbaikan &amp; Hardening Validasi File Upload untuk Cegah Webshell/RCE

Status: Open.

#959 In OpenSID/OpenKab;

· vickyrolanda opened on Mar 4, 2026