Skip to content

Release v0.2.26

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Jul 14:42
· 84 commits to main since this release
v0.2.26
e920304
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

fix(api): security improvements

Linked Tickets

https://digicatapult.atlassian.net/browse/VR-558

High Level Description

Improve API security following ZAP scan

Detailed Description

  • Handle multipart errors
  • Disable CORS
  • Don't return leaky headers
  • Return JSON objects
  • Re-map CloudAgent errors
    • 400 -> local 400 bad request
    • 404 -> local 404 not found
    • 422 -> local 422 validation failed
    • all other 4xx -> local 400 bad request
    • 5xx -> local 500 internal error
Assets 3
Loading