JanssenProject / JanssenProject/jans

feat(config-api): enhanced security for config-api endpoints

Open
#15,073 0 comments 0 reactions 1 assignee Claimed by @pujavs View on GitHub
comp-jans-config-api kind-feature
Dominant language
Java
Stars
648
Forks
174
Avg merge
1d 18h
Merged PRs (30d)
110

Description

To strength security of endpoints making following changes
- Enhance CORS Validation and Security Checks
- Enhance Content Security Policy (CSP)

-------------------

### Description

- Development target issue
- Validating the Origin against an explicit allow list
- Adding response headers

- Implementation Details

-------------------

### Prepare

- [ ] Read contribution guidelines
- [ ] Read license information

------------------

### Identified code changes

- [ ] task 1
- [ ] task 2
- [ ] task 3

-------------------

### Test cases and code coverage

- [ ] Write unit test to cover added/changed code
- [ ] Update integration tests to cover added/changed code

-------------------

### Document the changes

- [ ] task for updating user guides if needed
- [ ] task for updating installation and configuration guides if needed
- [ ] task for updating developer documentation if needed
- [ ] task for updating technical documentation if needed

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.