]> git.ardis.lu - envpass/commit
git.ardis.lu / envpass / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 339387a) | patch
Verify `Origin` header on POST
authorArdis Lu <ardisglu@gmail.com>
Fri, 22 May 2026 05:20:18 +0000 (22:20 -0700)
committerArdis Lu <ardisglu@gmail.com>
Fri, 22 May 2026 05:20:18 +0000 (22:20 -0700)
commitd37ba9edd48680b88b34689fb56af17903f728ed
treee3ce778071ab7ef8f0816e56cde6cb5945924caetree | snapshot (zip tar.gz)
parent339387adadc5185dd4e718b5576fe4b640bfae83commit | diff
Verify `Origin` header on POST

This is security hardening against cross-origin requests. Although the server already does not send CORS headers (so web browsers should already block a cross-origin POST), there should still be a server-side `Origin` check as defense-in-depth.
src/getPrf.js diff | blob | blame | history
test/getPrf.test.js diff | blob | blame | history
A CLI and library to encrypt your .env file using a passkey and decrypt it when needed during application execution.
This page took 0.03493 seconds and 4 git commands to generate.