cisagov / cisagov/XFD

Implement CSRF Protection (CRASM-741)

Open
#666 0 comments 0 reactions 1 assignee Claimed by @hawkishpolicy View on GitHub
frontend
Dominant language
Python
Stars
30
Forks
22
Avg merge
1d 21h
Merged PRs (30d)
22

Description

# 🐛 Summary #

A part of the Cross-Site Request Forgery issues referenced in the ST&E Findings (CRASM-730), these two items are peculiar in that they have dependencies determined by the new backend Python conversion. 


STE ID | Location | Code
-- | -- | --
1280561 | xfd_develop/frontend/scripts/api.js:10 | 10 export const app = express();
1280604 | xfd_develop/frontend/scripts/docs.js:8 | 8 export const app = express();


 


Acceptance Criteria:


Resolve Checkmarx findings for the above mentioned issues.

## Any helpful log output or screenshots ##

Paste the results here:

```console

```

Add any screenshots of the problem here.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.