Skip to content

Commit 5b17657

Browse files
committed
chore: link security firebase announcement, #77
1 parent 66f8ff0 commit 5b17657

File tree

2 files changed

+5
-3
lines changed

2 files changed

+5
-3
lines changed

docs/pages/announcements/firebase-storage-2024.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -133,7 +133,7 @@ _All Firebase components service usage (including those not used by ACAP) will o
133133
<FAQBox title="Are there security considerations that I should be aware of?">
134134
<div id="security-considerations" />
135135

136-
Yes. <u>Some of the latest core deliverables</u> implemented for ACAP in its [2.0](/changelog/#version-2-acap-20) version **introduced security flaws** not present in the initial ([1.0](/changelog/#version-1-acap-10) ) version, which had strictly followed security guidelines and adhered to best practices in web development security, effectively preventing these issues. Based on the following criteria, the new security flaws introduced in version 2.0 resulted in a **60% reduction in the established security from version 1.0**.
136+
Yes. <u>Some of the latest core deliverables</u> implemented for ACAP in its [2.0](/changelog/#version-2-acap-20) version **introduced security flaws** not present in the initial ([1.0](/changelog/#version-1-acap-10)) version, which had strictly followed [security guidelines](/security) and adhered to best practices in web development security, effectively preventing these issues. Based on the following criteria, the new security flaws introduced in version 2.0 resulted in a **60% reduction in the established security from version 1.0**.
137137

138138
| Criteria | Purpose | ACAP [1.0](/changelog/#version-1-acap-10) | ACAP [2.0](/changelog/#version-2-acap-20) |
139139
| --- | --- | :---: | :---: |

docs/pages/security.mdx

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -55,14 +55,16 @@ Manually test and ensure, using the Firebase Storage Web APIs, that:
5555

5656
- Ensure that forked **climate-services-webportal-v1** (ACAP 1.0) or **acap-v2** (ACAP 2.0) monorepo code base or copies remain PRIVATE in GitHub and other public platforms.
5757

58-
59-
6058
## User/Admin Accounts
6159

6260
1. Ensure that Admin accounts are created by the superadmin in the NodeJS backend using [Firebase Authentication](https://firebase.google.com/docs/auth/) with [Firebase Custom Claims](https://firebase.google.com/docs/auth/admin/custom-claims), leveraging the [Firebase Admin SDK](https://firebase.google.com/docs/admin/setup) to ensure maximum security.
6361

6462
2. More information about ACAP 1.0's Security requirements are available in its Software Requirements Specifications document available in this [link](https://github.com/amia-cis/acap-v2/blob/dev/docs/acap_1.0_software_requirements_specification_v4.0.pdf) (accessible only for developers with access).
6563

64+
## Related
65+
66+
- [Firebase Storage Announcements 2024 - Security Concerns](/announcements/firebase-storage-2024)
67+
6668
## References
6769

6870
### Firebase Authentication

0 commit comments

Comments
 (0)