Michael Krotscheck
Michael Krotscheck
@dhui - any idea why the `build` action is failing?
Hrm- I wouldn't mind helping with karma-browserstack-launcher. It's not a huge codebase to maintain, and we use it at work.
Here's a link to the NSP Node advisory. https://nodesecurity.io/advisories/566
For future readers, this can also be handled generically as an HTTP Interceptor: ``` import { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http'; import { Injectable } from '@angular/core'; import...
FWIW- I don't think it should be the framework's responsibility to protect us from passing invalid values. If I pass an undefined by accident, I would much rather it show...
Additional comment: Both the client and server would have to be updated.
That's fair. Let me update my "workaround" so that others can just copy/paste if they so choose: https://github.com/kangaroo-server/kangaroo/blob/17afab901e5152546133ba8e4cfe07d6782162b2/kangaroo-common/src/main/java/net/krotscheck/kangaroo/common/security/CsrfProtectionFilter.java