Explore Projects

The Juice Shop CTF Tool, currently made with vanilla JavaScript, needs to be upgraded to TypeScript to align with the main project for easier maintenance. Also, its code quality should be improved by applying Juice Shop's ESLint standards. The project's tests coverage and relevance should also be reviewed and strengthened where necessary . Furthermore, several other sub-projects like Juicy Statistics, Juicy Coupon Bot , Juicy Chat Bot should also be renovated

The Joplin desktop app currently uses native built-in PDF renderer of electron to display PDF attachments, this has multiple limitations like lack of ability to link to a specific page number, loss of scroll position state on re-rendering, annotations etc, not to mention the built-in renderer’s UI does not match with rest of the Joplin app. The aim of this project is to replace the built-in PDF renderer with a new 3rd party library and add multiple new pdf related features and improvements to the app.

The project aims to make the following changes to the talawa-api: Enforce a stricter, standard graphql-pattern to get rid of the current anti-pattern nature that exists in the API. Resolve the relations that exist within the application optimally. Caching data for MongoDB collection entities having significantly higher number of read operations than write operations using Redis in memory Cache. Monitoring changes in the API schemas and relaying the changes to the client apps using Graphql-Inspector for better versioning migrations. Implement Data Normalization on the Client side(admin-portal and talawa mobile app) cache-store using Apollo Client Normalization. Providing a standard, scalable Error Handling mechanism within the graphql API using unions and interfaces to allow a consistent relay of Errors to the Client apps which will allow them to have more control over customizing UI behavior in case of errors. Implement stricter and simpler RBAC in the API resolvers in line with the business logic. Implement SSL in the client-server layer to encrypt all data exchanged between the client apps and API. Encryption of PII data within the SSL layer and in the Database at rest for added security using AES algorithm to encrypt and decrypt PII fields.

Variant filtration is key to rare disease discovery. For a rare disease discovery app to be successful, it must be able to cleanly represent the relevant variants in a patient’s genome. Phenopackets present a method of filtering genes based on a patient’s phenotype. Phenotype data can narrow down the set of at risk genes clinicians need to parse during rare disease discovery using tools like exomiser. This project will use phenopackets to dynamically filter variants for the purpose of rare disease discovery. This project has two deliverables, each with their own set of requirements: A method to filter genes using phenopacket data. Must be optimized for speed, given this is a dynamic application. However, speed will be limited by the FHIR Genomics Operations reference implementation response time. A clean, easily understandable presentation of variants useful for manual review. Two views should be provided: one for the most at risk variants, and another for a more detailed view of each variant in at risk genes. The former should have a graphical component. The latter does not need to have as clean of a presentation. Users should be able to identify the most at risk variants within 5-10 seconds of the page loading.

<p>Data Object Service (DOS) is an emerging standard for specifying location of data across different cloud environments. The goal of DOS is to create a generic API on top of existing object storage systems so workflow systems can access data in a single, standard way regardless of where it's stored. This project is an implementation of a DOS server, which is capable of exposing and hosting both public and private data from any cloud environment. In particular, PGP Canada and GCP.</p>

<p>Building an API to stage the results of Static Application Security Testing (SAST) tools.</p>

<p>Adding new Api's to the workflow, to improve the breadth of cc-search. Implementing the provider scripts and add test suite for each api . Also change existing scripts in common crawl to api based crawl.</p>

<p>The 5 advanced features added to the Chrome extension of the Wayback Machine are focused on users who wish to research the history of the web .</p> <ol> <li>The timestamp feature lets a user see the timestamp of external page elements in a playback page.</li> <li>The radial tree feature lets a user visualize the hierarchy of pages in a website as a radial tree also known as a sequences sunburst diagram.</li> <li>The 'get books' feature lets a user navigate to a book on Internet Archive by analyzing a Wikipedia page for book titles. </li> <li>The ORCID feature displays the ORCID accounts of people whose names match a name given as input.</li> <li>The robust links feature is useful for web developers who wish to fight the phenomenon of link rot. This feature extends the Memento Project by Los Alamos National Laboratory and Old Dominion University.</li> </ol>

This project aims to optimize the open-source AV1 decoder, dav1d, for the RISC-V Vector (RVV) ISA by implementing Vector-Length Agnostic (VLA) intrinsics. The focus is on improving AV1 decoding performance across various resolutions and bit depths through dynamic vector-length handling, with benchmarking on real hardware like the Kendryte K230 (VLEN = 128 bits), the SpacemiT K1 (VLEN = 256 bit) and comparisons against ARM NEON using built-in dav1d tooling such as checkasm for detailed analysis.

OWASP FinBot is a security learning tool that lets people practice attacking AI agent systems in a safe environment. Right now it only teaches how to attack. There is no way to practice defending. This project adds the defending side. I will build a system that watches what an AI agent does at key points, checks if the action looks safe or dangerous, and blocks or flags it if needed. I will also add a scoring system that gives points to defenders when they successfully stop an attack. On top of this, I will create five hands-on challenges where learners can practice both attacking and defending the same scenario. One extra challenge will cover a situation where a tool the agent uses turns out to be malicious. The final output includes the detection and blocking system, the scoring system, five paired challenges, example config files, full documentation, and a complete test suite.

<p>This GSoC would be about adding testing to VLC-Android, specifically testing UI Scenarios, adding tests to the medialibrary integration, and adding tests to VLC-Android concerning the videoplayer which often sees regressions, and player inputs.</p>

<p>Knative is a Kubernetes-based platform to deploy and manage serverless workloads. Eventing is a key feature for Serverless Computing. They deliver their information to a specified target to make a whole system interactive. The problem is that every kind of event cannot be treated as the same one in the Knative ecosystem because the shape of each event depends on its sources. Knative Eventing is designed to be consistent with the CloudEvents definition to keep interoperability. To make this happen, the Knative Eventing community already has several kinds of event type definitions such as GitHub, AWS S3, GCP Pub/Sub, etc.<br> This project aims to add two event types:</p> <ul> <li>an event source that is able to generate CloudEvents when a new container image is uploaded to Docker Hub.</li> <li>another event source that is able to generate CloudEvents on success/failure of Task/Pipeline and every step of a Pipeline created by Tekton CI/CD.</li> </ul> <p>Both components would help application developers focus on developing applications itself and make Serverless Computing more diverse.</p>

<p>I want to add the capability of extracting burned in (hard) subtitles from videos to CCExtractor. As of now, CCExtractor works by only extracting caption data in the video if it is present in specific structures in the stream, and skips the actual video data (pixels) completely. But a lot of videos have hard subtitles burned into them, extracting which is a computer vision problem, and something which CCExtractor did not earlier have the capability to process.</p> <p>I want to create a system which will be able to extract well-formed subtitles from any input video, and be robust to the variations in font, size, color and language of the subtitles.</p>

<p>Juice shop uses AngularJS for it's frontend along with Bootstrap. Keeping the application up to date with the latest technologies is important to keep the modern look and feel it is about. The objective of the project is to replace Juice Shop's current client-side architecture written in AngularJS with Angular and also bring in Angular Material in place of Bootstrap. The frontend will be revamped along with keeping the customization feature intact and the End-to-End test suite will be refactored so that it can be reused.</p>

<p>Currently OSEM is a self hosted solution to organize conferences by various organizations developed in Ruby on Rails. Conference organizers all over the world host the application on their own servers to manage their conferences. The idea is to implement multi tenancy so that once hosted, the hosted version can be used by multiple organizations across the globe to manage their conferences.</p>

<p>Pinyin input method plays a significant role among all the input methods in China all the time. Though these pinyin input methods on ibus such as ibus-pinyin and ibus-libpinyin, are more and more popular in China, there are still some shortcomings of low accuracy and low speed, for they always search words from local table dictionary. Accordingly, integrating cloud pinyin in ibus-libpinyin is imperative.</p>

<h4>Jérémie Amsellem</h4> <p>Full proposal is available at : <a href="https://wiki.sugarlabs.org/index.php?title=Summer_of_Code/2016/SugarizerOS" target="_blank">https://wiki.sugarlabs.org/index.php?title=Summer_of_Code/2016/SugarizerOS</a></p>

This proposal aims to implement E2E Encryption in the Talawa Ecosystem from the ground up. The initial aim will be to implement secure credential transfer and session storage, followed by E2E encrypted private chats. Then I will build upon the idea to implement the same for group chats and media files. In the end, all of this will be implemented in Talawa Admin and finally testing and documentation will be done.

This project aims to address the inconvenience users face when testing websites that require pre-task activities, such as logging in. The proposed solution is a browser extension that records user interactions and generates a Zest script in JSON format for use with ZAP. The browser extension will also allow users to save generated scripts locally, and the final deliverables will be a fully functional browser extension with seamless integration with ZAP. Overall, this project will streamline the website testing process and improve efficiency.

When working on a project in Purr Data, saving regularly is important to avoid losing any changes or progress. The auto-save feature provides an added layer of protection by automatically saving the project at set intervals, such as every 10 minutes. In case of a sudden power outage or system crash, the auto-save feature can help to recover the project files, reducing the risk of losing valuable work. This feature also helps to reduce the likelihood of accidentally closing the program or forgetting to save changes. The auto-save feature in Purr Data is a helpful tool for ensuring that project data is automatically saved and backed up regularly, providing peace of mind and added protection against data loss.

Joplin has a lot of useful plugins to use built by the community. Some plugins provide a very core functionality that I think they can be a part of core app. To achieve this, we can ship these plugins by default for the desktop app. This project focuses on including updated default plugins in the Joplin releases and having them auto install on the first-app-start.

PyGoat is a platform for developers and testers to learn how to test applications and code securely. PyGoat is written in python and Django web frameworks. Currently, it has labs for OWASP 10,2017 and OWASP 10,2021. I propose to add more vuln from OWASP, SANS 25, Mitre, etc. There is a challenge section, which is currently empty; I want to fill this challenge section with combined vuln, sorted by difficulty, and point-based challenges. Also looking forward to creating a user-friendly, secure coding playground where user developers and testers can explore the best coding practice and secure coding.

This proposal's purpose is to update the User Interface and add new features. it aims to enhance and make user experience easier. This includes updating and expanding the search UI and functionality, building a lyrics UI with API integration, building an Audio metadata editor, and fixing and refactoring several UI issues.