Clojurians Log v2
Clojure programming
Channels
Apps
yada 2019-05-02
@gdrte has joined the channel
Hello All,
I have a question on recommended way of using yada. I know there is a edge repository, but I am little confused on the overall project structure. How does the overall project structure look like. Appreciate if any one points me to open example which is based on edge
mccraigmccraig 2019-05-02T15:21:02.029700Z
our pentest contractors just logged an XSS vulnerability relating to yada error messages - when a request fails parameter validation and an HTML 400 response is generated, the failing parameters are included without quoting - PR welcome @malcolmsparks @dominicm?
dominicm 2019-05-02T15:27:18.029900Z
PR welcome
dominicm 2019-05-02T15:27:49.030700Z
You could disable stacks in production
mccraigmccraig 2019-05-02T15:29:17.031200Z
probably a good idea in the short-term - how do i do that ?
mccraigmccraig 2019-05-02T15:30:35.031700Z
do i have to provide a :responses map for every handler, or is there a global switch somewhere ?
dominicm 2019-05-02T15:58:44.032100Z
there's a flag that can go on every resource, but you'll need to postwalk to do it
dominicm 2019-05-02T15:59:20.032500Z
I've forgotten the name of the flag, has "stack" in I think