Security audit of LdapRecord (result pdf)

[NicolasCARPi]

Hello,

Cure53, a pentest company, performed an audit of LdapRecord library while working on Passbolt integration, which uses this lib.

@stevebauman congratulations, the feedback is very good! 👏 🎉

Here is the report: https://help.passbolt.com/assets/files/PBL-09-report.pdf

Given that the report is public, I thought it would be beneficial to all users to know about it. @stevebauman did you know about this?

[stevebauman]

Thanks @NicolasCARPi! I did get contacted about the pentest report a while ago, but I didn't post the results (I wasn't sure at the time if they wanted to keep it semi-private or not).

I agree that this should be posted on the docs so it gives developers additional confidence in the library! 👍

[NicolasCARPi]

Yeah, I suggest adding a section in the README or wherever to mention it, with a link to the report (you might want to host it yourself though).