]> git.ardis.lu - envpass/commit
git.ardis.lu / envpass / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d37ba9e) | patch
Verify `Content-Type` header on POST
authorArdis Lu <ardisglu@gmail.com>
Fri, 22 May 2026 05:33:15 +0000 (22:33 -0700)
committerArdis Lu <ardisglu@gmail.com>
Fri, 22 May 2026 05:33:15 +0000 (22:33 -0700)
commit417db81d18a306aeb0d1c4ab91bac92490537268
tree06316d4571d1ab1d3a17ca126f309361bcd5014ctree | snapshot (zip tar.gz)
parentd37ba9edd48680b88b34689fb56af17903f728edcommit | diff
Verify `Content-Type` header on POST

Setting this header to `application/json` forces the request to be CORS preflighted (i.e. not a "simple request"). This is further security hardening against cross-origin requests from a web browser.
src/getPrf.js diff | blob | blame | history
test/getPrf.test.js diff | blob | blame | history
A CLI and library to encrypt your .env file using a passkey and decrypt it when needed during application execution.
This page took 0.031932 seconds and 4 git commands to generate.