I received a security scan from Fortify on a webapp (using SSL/HTTPS) written in Angular that I am working on and I have two questions (high risk issues) that I'm seeking help on.
- Access Control: Unprotected File - GET /fonts/fontawesome-webfont.ttf?4.3.0. So the webapp uses fontawesome icons and I'm guessing that the webfont files being accessible is the problem? I'd first like clarification that my understanding is correct. Then, is there anything I can do? If I change the permissions, I can stop the access to the file, but then the icons don't display! Is it really a high security risk that the webfont files are unprotected?
Finally, I see CWE numbers which I'm unclear as to if these correspond to CVE numbers that I've seen mentioned on sites? When I receive a report like this, is there a site I can go to that explains these issues in detail so that I may learn about them?
Best Regards, Julie