Logger first stage #4
Conversation
AlasDiablo
commented
Feb 9, 2024
AlasDiablo
commented
- Log http server
- Log cron
- Refactor file tree
- Log general info
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| app.get('/', function (req, res) { | ||
| res.sendFile(path.join(__dirname, 'public', '_next', 'server', 'app', 'index.html')); | ||
| }); |
Check failure
Code scanning / CodeQL
Missing rate limiting High
There was a problem hiding this comment.
We should ask if the reverse-proxy does limit the rate of access.
There was a problem hiding this comment.
Yes, but I will change this in near future
| app.get('/*', function (req, res) { | ||
| res.sendFile(path.join(__dirname, 'public')); | ||
| }); |
Check failure
Code scanning / CodeQL
Missing rate limiting High
| `This traitment doesn't exist on current process id=${id}`, | ||
| ); | ||
| logger.error(`This traitment doesn't exist on current process id=${id}`); | ||
| res.status(404).send(`This traitment doesn't exist on current process id=${id}`); |
Check failure
Code scanning / CodeQL
Reflected cross-site scripting High
| `${environment.fileFolder}${traitment.file}`, | ||
| ); | ||
| const urlEnrichment = traitment.enrichment?.url ? traitment.enrichment?.url : ''; | ||
| const fileData = fs.readFileSync(`${environment.fileFolder}${traitment.file}`); |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
| const swaggerJsonConfig = JSON.stringify(swaggerSpecConfig, null, 2); | ||
| fs.writeFileSync('swagger-config.json', swaggerJsonConfig); | ||
|
|
||
| console.log('Swagger JSON file generated successfully'); |
There was a problem hiding this comment.
note (non-blocking): Check that it's an autonomous script, not a part of the backend.
