8000 fix: security vulnerabilities using ZAP by sanjay-k1910 · Pull Request #625 · credebl/studio · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

fix: security vulnerabilities using ZAP #625

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 29 commits into from
Apr 2, 2024
Merged

fix: security vulnerabilities using ZAP #625

merged 29 commits into from
Apr 2, 2024

Conversation

sanjay-k1910
Copy link
Contributor
@sanjay-k1910 sanjay-k1910 commented Mar 15, 2024 •
edited
Loading

What?

  • Resolved security vulnerabilities of ZAP

@sanjay-k1910
refactor: security
df6f7c0 
Signed-off-by: sanjay-k1910 <sanjay.khatal@ayanworks.com>
@sanjay-k1910
refactor: content policy in meta tags
cdea83f 
Signed-off-by: sanjay-k1910 <sanjay.khatal@ayanworks.com>
@sanjay-k1910
refactor: workflow and deployctl file
dc9f012 
Signed-off-by: sanjay-k1910 <sanjay.khatal@ayanworks.com>
@sanjay-k1910
refactor: CSP value
24437d7 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910 sanjay-k1910 self-assigned this Mar 15, 2024
@sanjay-k1910
Merge branch 'develop' of https://github.com/credebl/studio into reac…
eb87caf 
…t-helmet-security

Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
refactor: meta tags
e027c84 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: headers
84e0125 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: headers and meta tags
2093410 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: config file
5d98f63 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: layout config
be31c28 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: middleware
0ebec43 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
ajile-in
ajile-in requested changes Mar 19, 2024
View reviewed changes
Copy link
Contributor
@ajile-in ajile-in left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Finally, which approach is working? deployctl.yaml? or something else?

@sanjay-k1910
fix: middleware to add headers
5e8cfcb 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: form-action header
ad3c086 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: script header
2501e55 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: allow domain
f61d6dc 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: nonce
800319f 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: security headers
46bba0c 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: script-src
2af5b7a 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
refactor: removed unused code
c667521 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
Copy link
Contributor Author

Finally, which approach is working? deployctl.yaml? or something else?

Removed the deployctl.yaml file and implemented headers in middleware.ts file.

@sanjay-k1910 sanjay-k1910 requested a review from ajile-in March 26, 2024 07:50
@sanjay-k1910
refactor: logs, csp directives, axios refresh token
feeb191 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: pageRoute error
7645b3e 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910
fix: dark mode issue
63d19e8 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910 sanjay-k1910 changed the title fix: zap security fix: security vulnerabilities of ZAP Mar 27, 2024
@sanjay-k1910
Merge branch 'develop' of https://github.com/credebl/studio into reac…
62bfe5f 
…t-helmet-security

Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sanjay-k1910 sanjay-k1910 changed the title fix: security vulnerabilities of ZAP fix: security vulnerabilities using ZAP Apr 1, 2024
@sanjay-k1910
fix: csrf token issue
144bcd5 
Signed-off-by: sanjay.khatal <sanjay.khatal@ayanworks.com>
@sonarqubecloud SonarQubeCloud
Copy link
sonarqubecloud bot commented Apr 1, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

tipusinghaw
tipusinghaw approved these changes Apr 2, 2024
View reviewed changes
Copy link
Contributor
@tipusinghaw tipusinghaw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@sanjay-k1910 sanjay-k1910 merged commit f6e0af4 into develop Apr 2, 2024
@sanjay-k1910 sanjay-k1910 deleted the react-helmet-security branch April 2, 2024 09:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@vivekayanworks vivekayanworks vivekayanworks approved these changes

@tipusinghaw tipusinghaw tipusinghaw approved these changes

@ajile-in ajile-in Awaiting requested review from ajile-in

@bhavanakarwade bhavanakarwade Awaiting requested review from bhavanakarwade

Assignees

@sanjay-k1910 sanjay-k1910

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@sanjay-k1910 @ajile-in @vivekayanworks @tipusinghaw
0