Observatory by Mozilla is a project designed to help developers, system administrators, and security professionals configure their sites safely and securely. Currently, OpenHub gets an F ranking and ... [More] 0/100 score. Striving for a better rank should be in line with Black Duck Software's mission statement: Organizations worldwide use Black Duck Software’s industry-leading products to secure and manage open source software, eliminating the pain related to security vulnerabilities, compliance and operational risk. [Less]

Title says it all - Firefox even blocks some content and warns about other.

I'm currently trying to implement a Content Security Policy (CSP) on our project site. TL;DR: a CSP allows to tell a browser where it is supposed to find resources like scripts and styles, and pin ... [More] this down to a number of (preferably few) known locations. In particular, you try to avoid using inline scripts and styles, because those can likely be influenced by people without privileged access to your site (e.g. embedded in user comments). OpenHub widgets use inline styles - if those could be moved to a style sheet file, using the widgets with a CSP would become easier and. It might even make OpenHub more efficient, because this style it likely the same for all widgets of some kinds. See https://observatory.mozilla.org/analyze.html?host=openhub.net for links to various ways to improve OpenHub in regard to security, CSP is among them. [Less]

This is done already, isn't it?

https://www.openhub.net/p/gimp is outdated: Analyzed 4 months ago based on code collected 4 months ago. When browsing the forum, I see that this seems to happen a lot for many projects recently.

Hi, I'm using the Stats widget on a dark background. This makes it almost invisible, because it has a transparent background. UIs there any way to set a background color for the widget? CSS styling ... [More] from the outside into the iframe is not possible. [Less]