Skip to content
This repository was archived by the owner on May 18, 2024. It is now read-only.

Commit 74c59e1

Browse files
committed
Added security Disclosures section to the site.
1 parent 9f33b19 commit 74c59e1

File tree

7 files changed

+946
-668
lines changed

7 files changed

+946
-668
lines changed

app/Config/App.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,8 @@ class App extends BaseConfig
2727
'menudata' => [
2828
['name' => 'bottomNav1', 'link' => '/help'],
2929
['name' => 'bottomNav2', 'link' => '/help/legal'],
30-
['name' => 'bottomNav3', 'link' => '/help/about']
30+
['name' => 'bottomNav3', 'link' => '/help/about'],
31+
['name' => 'bottomNav4', 'link' => '/security-notices'],
3132
]
3233
];
3334

app/Config/Routes.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@
4545
$routes->get('help','Help::index');
4646
$routes->get('help/legal','Help::legal');
4747
$routes->get('help/about','Help::about');
48+
$routes->get('security-notices','Security::notices');
4849

4950
// localized routes
5051
$routes->get('{locale}/home','Home::index');

app/Controllers/Security.php

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
<?php
2+
3+
namespace App\Controllers;
4+
5+
class Security extends BaseController
6+
{
7+
/**
8+
* Security Notices page
9+
*/
10+
public function notices()
11+
{
12+
$this->data['title'] = 'Security Notices';
13+
14+
$this->render('security');
15+
}
16+
}

app/Language/en/Site.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,4 +9,5 @@
99
'bottomNav1' => 'Policies',
1010
'bottomNav2' => 'The Fine Print',
1111
'bottomNav3' => 'About',
12+
'bottomNav4' => 'Security Notices',
1213
];

app/Views/security.php

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
<?= $this->extend('theme/template') ?>
2+
3+
<?= $this->section('content') ?>
4+
<div class="container">
5+
<div class="row">
6+
7+
<p>The following items have been reported to the CodeIgniter core team and addressed as potential security
8+
concerns. Not all of them will affect your sites, but you should periodically review this list to
9+
determine any threats.
10+
</p>
11+
12+
<p>These disclosures are primarily aimed at the website and surrounding environment. Security disclosures
13+
affecting the framework will be handled through GitHub's built-in Security Advisors functionality.
14+
</p>
15+
16+
17+
<section class="well disclosure">
18+
<h1>codeigniter.com Email Spoofing</h1>
19+
20+
<p>Oct 25, 2021 - <b>The MX</b> reported that the codeigniter.com domain was able to be used for email
21+
spoofing due to the lack of a DKIM record. We updated the DNS to include a DKIM record as a result.
22+
</p>
23+
</section>
24+
</div>
25+
</div>
26+
<?= $this->endSection() ?>

0 commit comments

Comments
 (0)