Refactoring organisation, bundling and security improvements (#6765)

* * Simplified bundling to just one bundle
* Removed cache invalidation token from bundling
* Generate strong persistent random string on deploy to use for JWT signing
* WIP: moving api-secret and JWT signing to a separate centralized security component
* Moved some server components away from project root
* Fix issues reported by linter

* Ignore detect-object-injection everywhere but the client

* Make admin message button red

* Remove alarms for some security alerts on code

* api_secret is now fully contained in the enclave
This commit is contained in:
Sulka Haro
2021-02-02 19:53:30 +02:00
committed by GitHub
parent 3ab718ca37
commit d7e011d8f5
64 changed files with 362 additions and 249 deletions
+1 -1
View File
@@ -5,7 +5,7 @@ var times = require('../lib/times');
var levels = require('../lib/levels');
describe('sage', function ( ) {
var env = require('../env')();
var env = require('../lib/server/env')();
var ctx = {};
ctx.levels = levels;
ctx.ddata = require('../lib/data/ddata')();