docs: security
Open
documentation
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 802
- Avg merge
- 1d 7h
- Merged PRs (30d)
- 5
Description
> We plan to publish a comprehensive guideline doc on how to create secure Web applications.
>
> Native support such as XSRF, XSS prevention may also be added to the gRPC-Web protocol.
Could you please add more details about security and how to properly use metadata for authentication via grpc-web and also cover XSRF / XSS and etc
Also I have question, grpc-web support cookies? I want to set `httponly` `secure` cookie (not accessible from javascript) from server to client and want to get all requests from client to server with that cookie
Contributor guide
Assessment
This issue has not been assessed yet.