JanssenProject / JanssenProject/jans
feat(config-api): enhanced security for config-api endpoints
- Dominant language
- Java
- Stars
- 648
- Forks
- 174
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 110
Description
To strength security of endpoints making following changes
- Enhance CORS Validation and Security Checks
- Enhance Content Security Policy (CSP)
-------------------
### Description
- Development target issue
- Validating the Origin against an explicit allow list
- Adding response headers
- Implementation Details
-------------------
### Prepare
- [ ] Read contribution guidelines
- [ ] Read license information
------------------
### Identified code changes
- [ ] task 1
- [ ] task 2
- [ ] task 3
-------------------
### Test cases and code coverage
- [ ] Write unit test to cover added/changed code
- [ ] Update integration tests to cover added/changed code
-------------------
### Document the changes
- [ ] task for updating user guides if needed
- [ ] task for updating installation and configuration guides if needed
- [ ] task for updating developer documentation if needed
- [ ] task for updating technical documentation if needed
Contributor guide
Assessment
This issue has not been assessed yet.