Aug 20, 2021GSoC @ OpenMRS 2021: Security Issues Project Final Evaluation· Project Title: Security Issues · Primary mentor: Isaac Sears @isears · Backup mentor: Sharif Magembe @sharif · Student: Kate Belson @katebelson · Project Link: GSoC 2021: Patch Security Issues Overview For Google Summer of Code 2021 at OpenMRS, I worked on the Security Issues project. My team had two…6 min read6 min read
Aug 19, 2021GSoC with OpenMRS — Week 10 UpdateFor week 10, I continued with some work I had outstanding from last week that has been previously described, and reflected on my time as a GSoC student. How I Found GSoC: I really enjoyed my time as a GSoC student — it is definitely something I would do again…1 min read1 min read
Aug 16, 2021GSoC with OpenMRS — Week 9 UpdateFor week 9, I started research into a password security vulnerability. The Vulnerability: When a user creates/changes a password, the current length requirement is 8 characters long. This would be much more secure if it were 12 characters long, so my task was to make it so it could be…2 min read2 min read
Aug 14, 2021GSoC with OpenMRS — Week 8 UpdateFor week 8, I worked with another GSoC member to patch an XSS vulnerability. The Vulnerability: To recreate this vulnerability, I took these steps: 1. Create a privilege named <script>alert(1);</script>. 2. Delete that privilege. 3. Get the alert box showing “1”. …1 min read1 min read
Aug 3, 2021GSoC with OpenMRS — Week 7 UpdateFor week 7, I submitted a PR that partially fixed the XSS attack I have been working on. The Solution: First I ran the XSS attack, which involved editing the page’s URL by changing a variable to contain a JavaScript popup. I then used Inspect Element to view the source…1 min read1 min read
Jul 17, 2021GSoC with OpenMRS — Week 6 UpdateFor week 6, I had a few setbacks in terms of running the OpenMRS SDK, but later in the week had some success in managing to edit the webpage in the code and have my changes reflected on the page. …2 min read2 min read
Jul 14, 2021GSoC with OpenMRS — Week 5 UpdateFor week 5, I attempted to fix another RubyGems error similar to last week’s, but it was in a different module of OpenMRS. The Error: The error was the same as last week: the RubyGems link in the code did not support HTTPS and therefore my version of Maven could…1 min read1 min read
Jul 6, 2021GSoC with OpenMRS — Week 4 UpdateThis week I had to put the XSS vulnerability on hold due to an error that wouldn’t let me update the code with Maven. I have since fixed this error and have submitted my first pull request, which I will talk about in this week’s blog. The Error: When I…2 min read2 min read
Jul 1, 2021GSoC with OpenMRS — Week 3 UpdateFor Google Summer of Code with OpenMRS this week, I looked into setting up the programming environment with IntelliJ as my IDE, and locating the error in the code that made the previously mentioned XSS vulnerability possible. Setting Up IntelliJ: I had a few issues setting up IntelliJ initially as…2 min read2 min read
Jul 1, 2021GSoC with OpenMRS — Week 2 UpdateAs mentioned last week, I am looking into fixing an XSS (Cross Site Scripting) vulnerability in the Appointment Scheduling part of the OpenMRS application. This week, in order to delve into the problem, I have been researching open source projects and how they work, getting to know OpenMRS, and learning…2 min read2 min read
