Back to OWASP Foundation
GSoC 2026

Add the EoP Game to the card browser

Currently, the EoP deck is not browsable or accessible through Cornucopia's API, blocking integration with OWASP Threat Dragon. This project adds a fully browsable Elevation of Privilege (EoP) deck to OWASP Cornucopia and exposes EoP cards through the existing API, enabling Threat Dragon integration. The implementation follows the Companion Edition scaffolding as a reference, which I already implemented in PR #2528 (https://github.com/OWASP/cornucopia/pull/2528). Deliverables include: data scaffolding for all 78 EoP cards across 6 suits, browsable deck UI with full card endpoints, API endpoints for EoP language and CRE mappings, a "Need more info?" link on copi cards linking to their corresponding cornucopia.owasp.org pages, and a maintainability refactor of the card browser — moving suit colors and per-card image data into YAML config files and introducing per-deck layout components, so adding any future deck requires only config and a new component with no changes to existing templates. The EoP game is licensed under CC-BY-3.0.

Project details

Contributor

Ayman Algamal

Mentors

Not available

Technologies

Not listed in the archive