Skip to content

Fix/remove allow header from response#48

Merged
hari-kuriakose merged 7 commits into
mainfrom
fix/remove-allow-header-from-response
Mar 4, 2024
Merged

Fix/remove allow header from response#48
hari-kuriakose merged 7 commits into
mainfrom
fix/remove-allow-header-from-response

Conversation

@jaags-dev

@jaags-dev jaags-dev commented Mar 4, 2024

Copy link
Copy Markdown
Contributor

What

  • Added middleware to remove Allow from header
    ...

Why

  • removed for security reasons in a situation where Attacker can easily enumerate what are methods are used by the application
    ...

How

...

Relevant Docs

Related Issues or PRs

Dependencies Versions / Env Variables

Notes on Testing

...

Screenshots

image

...

Checklist

I have read and understood the Contribution Guidelines.

Comment thread backend/middleware/remove_allow_header.py Outdated

@hari-kuriakose hari-kuriakose left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jagadeeswaran-zipstack Request to add more info on why we are doing this.

@hari-kuriakose hari-kuriakose left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@hari-kuriakose
hari-kuriakose merged commit fa650e9 into main Mar 4, 2024
@hari-kuriakose
hari-kuriakose deleted the fix/remove-allow-header-from-response branch March 4, 2024 13:34
pk-zipstack pushed a commit that referenced this pull request Aug 20, 2025
* Added a middleware to remove allow from header

* Fixed import issue

* Added a middleware to remove allow from header

* changed to django middlewareMixin

---------

Signed-off-by: jagadeeswaran-zipstack <jagadeeswaran@zipstack.com>
Co-authored-by: Neha <115609453+nehabagdia@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants