freeCodeCamp/api/src
Oliver Eyton-Williams 71d5a67745
feat(api): add security headers (#49995)
* feat(api): add security headers

Includes the OWASP recommended headers for REST APIs. Taken from
https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html#security-headers

* test: check OWASP headers appear on GET / request

* fix: only enable Strict-Transport-Security in prod
2023-04-13 10:16:58 +02:00
..
db chore(api): compile TS into /dist (#49812 2023-03-28 19:42:20 +05:30
middleware chore(api): compile TS into /dist (#49812 2023-03-28 19:42:20 +05:30
plugins feat(api): add security headers (#49995) 2023-04-13 10:16:58 +02:00
routes fix(deps): update dependency @sinclair/typebox to v0.26.6 (#49855) 2023-04-03 09:13:36 +00:00
schemas fix(deps): update dependency @sinclair/typebox to v0.26.6 (#49855) 2023-04-03 09:13:36 +00:00
utils feat(api): create sentry plugin (#49731) 2023-04-05 08:35:23 -07:00
app.ts feat(api): add security headers (#49995) 2023-04-13 10:16:58 +02:00
server.test.ts feat(api): add security headers (#49995) 2023-04-13 10:16:58 +02:00
server.ts feat(api): dev login (#49880) 2023-03-29 18:08:38 +05:30