Ozone Platform Security Audit

[prole]

https://www.owfgoss.org/

https://github.com/ozoneplatform/owf

The Ozone Widget Framework, a government developed application for widget development is available on GitHub under version 2.0 of the Apache license. The Defense Department was under a year-end congressional deadline to release the code as open source; its developers describe it in the ReadMe as "basically a glorified web portal engine, with the unusual characteristic that the content within the portal (i.e. the widgets) is decentralized."

Security Researchers could look to see how security is implemented on this framework, and to check to see if any vulnerabilities exist.