David Bohannon comments

Repositories
Issues
Comments

Results 2 comments of


                                            David Bohannon

Returns Access-Control-Allow-Credentials Header for All Origins

If you don't wish to throw an error then I would suggest leaving the ACAO header as the wildcard * rather than reflecting the origin. A compliant browser will refuse...

Harden express-processimage for use in production

What's the current status with respect to hardening this package for use in production environments? I don't see any instances where remote code execution is possible. It looks like all...