Extension Fortify

Title	Fortify
Name	ckanext-fortify
Type	Public extension
Description	Suite of security features for CKAN including HTML download forcing, parent org checks, anti-CSRF tokens, and password policy
CKAN versions	~2.9, ~2.10 Show details These CKAN Versions are exactely matched: 2.10.0 2.10.1 2.10.2 2.10.3 2.10.4 2.10.5 2.10.6 2.10.7 2.10.8 2.11.0 2.11.1 2.11.2 2.11.3 2.12.0 2.9.0 2.9.1 2.9.10 2.9.11 2.9.2 2.9.3 2.9.4 2.9.5 2.9.6 2.9.7 2.9.8 2.9.9
Download-Url (zip)	https://github.com/DataShades/ckanext-fortify.git#egg=ckanext-fortify
Download-Url commit date	2023-03-13
Url to repo	https://github.com/DataShades/ckanext-fortify
Category	Authentication & Security

Description (long)	Show details The fortify extension provides a collection of security enhancements for CKAN. It includes four main features, all opt-in and disabled by default: 1) Force HTML resource downloads to prevent Stored XSS attacks, 2) Parent organization membership checks for child organization creation (requires ckanext-hierarchy) to prevent unauthorized org creation, 3) Anti-CSRF token protection for all forms and important action buttons, 4) Configurable password policy with minimum length and repeated character controls. Each security feature can be enabled independently via configuration settings.
Version	0.0.1
Version release date	2023-03-13
Contact name	Salsa Digital
Contakt email	(not set)
Contact Url	(not set)

Configuration hints	Installation: cd /usr/lib/ckan/default/src python setup.py develop Add to ckan.plugins: fortify All features are disabled by default (opt-in security): Force HTML resource downloads (prevent Stored XSS): ckan.fortify.force_html_resource_downloads = True Default: False Parent organization membership check (requires ckanext-hierarchy): Verifies user is admin of parent org before allowing child org creation ckan.fortify.check_parent_org_allowed = True Default: False Anti-CSRF tokens for forms and action buttons: ckan.fortify.enable_anti_csrf_tokens = True Default: False Password policy: ckan.fortify.enable_password_policy = True ckan.fortify.password_policy.min_length = 12 ckan.fortify.password_policy.allow_repeated_chars = True Defaults: False, 12, True allow_repeated_chars = True means repeated characters are allowed Set to False to disallow repeated characters in passwords Each feature can be enabled independently based on security requirements.
Plugins to configure (ckan.ini)	fortify
CKAN Settings (ckan.ini)	# ckan.fortify.force_html_resource_downloads = True # ckan.fortify.check_parent_org_allowed = True # ckan.fortify.enable_anti_csrf_tokens = True # ckan.fortify.enable_password_policy = True # ckan.fortify.password_policy.min_length = 12 # ckan.fortify.password_policy.allow_repeated_chars = True
DB migration to be executed	(not set)

Default: False