Refactoring organisation, bundling and security improvements (#6765)

Browse Source

* * Simplified bundling to just one bundle
* Removed cache invalidation token from bundling
* Generate strong persistent random string on deploy to use for JWT signing
* WIP: moving api-secret and JWT signing to a separate centralized security component
* Moved some server components away from project root
* Fix issues reported by linter

* Ignore detect-object-injection everywhere but the client

* Make admin message button red

* Remove alarms for some security alerts on code

* api_secret is now fully contained in the enclave

...

This commit is contained in:

Sulka Haro

2021-02-02 19:53:30 +02:00

committed by GitHub

parent 3ab718ca37

commit d7e011d8f5

64 changed files with 362 additions and 249 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

lib/server/swagger.yaml

Executable

+1084

File diff suppressed because it is too large Load Diff