security: Replace phosphor-webui with webui-vue
webui-vue is a modern replacement for phosphor-webui.
Overall the community has already moved to webui-vue.
Replace references to phosphor-webui with webui-vue.
Some reasons why webui-vue is preferred over phosphor-webui:
phosphor-webui uses AngularJS which has gone End of Life.
phosphor-webui uses the REST D-BUS API which has been disabled by
default.
webui-vue has additional features.
Change-Id: Ieb027814e226c9d7db8edbf2ca64da26e697fd16
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
diff --git a/security/network-security-considerations.md b/security/network-security-considerations.md
index 3ad11b0..e2189ba 100644
--- a/security/network-security-considerations.md
+++ b/security/network-security-considerations.md
@@ -152,7 +152,7 @@
BMCWeb is the Web server for:
- The Redfish REST APIs.
- - The phosphor-webui Web interface.
+ - The webui-vue Web interface.
- The Phosphor D-Bus REST interface.
And initiates WebSockets for:
- Host KVM.
@@ -207,11 +207,11 @@
section of the "Redfish Specification" (document ID DSP0266) available
from https://www.dmtf.org/standards/redfish.
-#### The phosphor-webui Web application
+#### The webui-vue Web application
General considerations for Web applications such as given by [OWASP
Web Application Security Guidance][] apply to OpenBMC. The
-phosphor-webui uses username and password-based authentication, and
+webui-vue uses username and password-based authentication, and
REST APIs for subsequent access.
[OWASP Web Application Security Guidance]: https://www.owasp.org/index.php/Web_Application_Security_Guidance