1
0
mirror of https://github.com/Unleash/unleash.git synced 2025-01-11 00:08:30 +01:00
unleash.unleash/src
Ivar Conradi Østhus 43c563af57
fix: optimize headers we return for API calls. (#5607)
Today we include a lot of "secutiry headers" for all API calls. Quite a
lot of them are only relevent when we return a HTML document for the
browser.

This PR removes and simplify these headers for API calls, so that we do
not include unecessary data in the HTTP headers.

Each header have been carfully examied by following best practices from
these source:

-
https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html
- https://owasp.org/www-project-secure-headers/

This feature is protected with feature flag named 'stripHeadersOnAPI'.
2023-12-12 10:20:28 +01:00
..
lib fix: optimize headers we return for API calls. (#5607) 2023-12-12 10:20:28 +01:00
mailtemplates feat: more info on staleness in health report (#5582) 2023-12-11 13:11:28 +02:00
migrations feat: add created_by to api_tokens table (#5596) 2023-12-11 15:41:36 +01:00
test feat: Scheduled change conflict email templates and function (#5547) 2023-12-06 11:57:19 +02:00
migrator.ts
server-dev.ts fix: optimize headers we return for API calls. (#5607) 2023-12-12 10:20:28 +01:00
server.ts