mirror of
https://github.com/Unleash/unleash.git
synced 2025-09-19 17:52:45 +02:00
43c563af57
Today we include a lot of "secutiry headers" for all API calls. Quite a lot of them are only relevent when we return a HTML document for the browser. This PR removes and simplify these headers for API calls, so that we do not include unecessary data in the HTTP headers. Each header have been carfully examied by following best practices from these source: - https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html - https://owasp.org/www-project-secure-headers/ This feature is protected with feature flag named 'stripHeadersOnAPI'. |
||
|---|---|---|
| .. | ||
| models | ||
| settings | ||
| stores | ||
| api-user.ts | ||
| authentication-required.ts | ||
| core.ts | ||
| environment.ts | ||
| events.ts | ||
| experimental.ts | ||
| favorites.ts | ||
| group.ts | ||
| index.ts | ||
| model.ts | ||
| mutable.ts | ||
| no-auth-user.ts | ||
| openapi.d.ts | ||
| option.ts | ||
| partial.ts | ||
| permissions.ts | ||
| project.ts | ||
| query.ts | ||
| saved.ts | ||
| serialize-dates.test.ts | ||
| serialize-dates.ts | ||
| services.ts | ||
| stores.ts | ||
| user.test.ts | ||
| user.ts | ||