3 ms·
Is Companies House's website not done by GDS or something? I worked on a few GDS projects for DFT, we had to have independent pen testers test our services befo
by mathieuh 6y ago
Is Companies House's website not done by GDS or something? I worked on a few GDS projects for DFT, we had to have independent pen testers test our services before they moved between phases.
- Someone1234 6y agoCompanies House wasn't compromised, they warned third parties about potential issues with the underlying data.
- mathieuh 6y agoNo I mean the fact that this was possible on their website, XSS is one of the simplest things to test, in fact it was one of the standard tests UI testers would do on new screens. Not saying they were compromised.
- ceejayoz 6y agoIt wasn't possible on their website. They provide data feeds to many third parties, who might themselves be vulnerable, hence the notification.
- mkishi 6y agoAccording to a thread [1] on Companies House's Developer Forum, they were. [1]: https://forum.aws.chdev.org/t/cross-site-scripting-xss-software-attack/3355 https://forum.aws.chdev.org/t/cross-site-scripting-xss-softw...