From f2f382f6bb8b205fce90a8744739f9399ba56dbd Mon Sep 17 00:00:00 2001
From: Dinesh Bolkensteyn <dinesh@dinsoft.net>
Date: Wed, 17 Apr 2019 18:00:38 +0200
Subject: [PATCH 1/2] README: Point to Skaffold's website rather than repo
 (#208)

All mentioned projects (Kubernetes, Istio, etc.) point to their websites expect for Skaffold that points to its source code repository.

The website should be a better entry point to understand the big picture, access the quickstart guides and more in-depth howtos.
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 7a14baf..5d375fb 100644
--- a/README.md
+++ b/README.md
@@ -60,7 +60,7 @@ Find **Protocol Buffers Descriptions** at the [`./pb` directory](./pb).
   addition to these, using Istio enables features like Request/Response
   **Metrics** and **Context Graph** out of the box. When it is running out of
   Google Cloud, this code path remains inactive.
-- **[Skaffold](https://github.com/GoogleContainerTools/skaffold):** Application
+- **[Skaffold](https://skaffold.dev):** Application
   is deployed to Kubernetes with a single command using Skaffold.
 - **Synthetic Load Generation:** The application demo comes with a background
   job that creates realistic usage patterns on the website using

From f276995585251b7b88554ff563b41e857a12d2dd Mon Sep 17 00:00:00 2001
From: Chris Proto <chroto24+github@gmail.com>
Date: Tue, 30 Apr 2019 12:46:50 -0400
Subject: [PATCH 2/2] Follow OWASP best practices on CC presentation on
 checkout form (#207)

* Follow OWASP best practices on CC presentation on checkout form

See OWASP recommendations here:
<https://www.owasp.org/index.php/Handling_E-Commerce_Payments#Displaying_portions_of_the_credit_card>

* Use `input type=password`
* Set `autocomplete="off"`

* Change credit_card_number input type back to "text"
---
 src/frontend/templates/cart.html | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/frontend/templates/cart.html b/src/frontend/templates/cart.html
index 938d45d..9bd53d6 100644
--- a/src/frontend/templates/cart.html
+++ b/src/frontend/templates/cart.html
@@ -132,7 +132,8 @@
                                         </div>
                                     <div class="col-md-2 mb-3">
                                         <label for="credit_card_cvv">CVV</label>
-                                        <input type="text" class="form-control" id="credit_card_cvv"
+                                        <input type="password" class="form-control" id="credit_card_cvv"
+                                            autocomplete="off"
                                             name="credit_card_cvv" value="672" required pattern="\d{3}">
                                     </div>
                                 </div>