GSoC 2018 Project/Mentor Brainstorming

[cintiadr (Cintia Del Rio)]

@danfuterman

Implement Atlas 2.0: Take the great work on converting Atlas to nodejs, dockerize it, address any blocker issues, and get it into production.

@cintiadr - I think you had a few concerns with the current Atlas. If they’re relevant, perhaps you could share some of those to feed into the objectives for this project idea?

Yes yes yes!

Atlas 3.0 Project

The current atlas has quite a few rough corners. I do have both some deployments and security complaints about it. Is there any real plan of finishing the work and deploying version 3? Or do we prefer to have someone to fix version 2?

I want to make sure that:

• Currently, atlas doesn’t work with the new ID. I want Atlas login to connect straight to ldap.
• Downloadable images are not working. It would be nice to have that feature again
• I don’t want atlas to load images from external (and arbitrary) pages. I can offer an S3 bucket, I prefer users to upload the images to our system if they want it displayed. Also, it’s important to offer everything in https (no mixed content). Important to note that the image should be verified on its type, we don’t want weird/executable files uploaded (not only by extension, but type too).
• I’d like all external/user URLs to have “rel=nofollow” (HTML a rel Attribute)
• I’d like admins to have access to disable/delete anything suspicious.
• I’d need admins (or certain email) to receive notifications when a new site is added (with the URL and image), so we can action on spammers.
• We need to make sure it’s not possible to cause javascript injections, even when displaying the image.