Stackle icon indicating copy to clipboard operation
Stackle copied to clipboard

swagger doc integration initial commits

Open DulanjaliSKoswatte opened this issue 5 years ago • 0 comments

Fixes CWE 16 and CWE 264 in stackle-api

Changes proposed in the pull request

Stackle-master\stackle_api\server.js

const helmet = require('helmet') app.use(helmet.frameguard())

app.use(function (err, req, res, next) { res.header("Access-Control-Allow-Origin", "http://localhost:8080"); res.header('Access-Control-Allow-Methods', 'GET, PUT, POST, DELETE, OPTIONS'); res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept"); console.error(err.stack); res.status(500).send('Something broke!') });

Impact

HTTP Header level validation

Other information

Check if you have done the following before creating the PR

  • [ ] console logs have been deleted
  • [ ] No commented code (If commented the reasons are given)

Stackle-master.zip Cross-Domain Misconfiguration.docx X-Frame-Options Header Not Set.docx

DulanjaliSKoswatte avatar May 09 '20 09:05 DulanjaliSKoswatte