Skip to content

Implement CSRF Protection (CRASM-741) #666

@hawkishpolicy

Description

@hawkishpolicy

🐛 Summary

A part of the Cross-Site Request Forgery issues referenced in the ST&E Findings (CRASM-730), these two items are peculiar in that they have dependencies determined by the new backend Python conversion. 

STE ID Location Code
1280561 xfd_develop/frontend/scripts/api.js:10 10 export const app = express();
1280604 xfd_develop/frontend/scripts/docs.js:8 8 export const app = express();

 

Acceptance Criteria:

Resolve Checkmarx findings for the above mentioned issues.

Any helpful log output or screenshots

Paste the results here:

Add any screenshots of the problem here.

Metadata

Metadata

Assignees

Labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions