Hello All, I have a question on recommended way of using yada. I know there is a edge repository, but I am little confused on the overall project structure. How does the overall project structure look like. Appreciate if any one points me to open example which is based on edge

our pentest contractors just logged an XSS vulnerability relating to yada error messages - when a request fails parameter validation and an HTML 400 response is generated, the failing parameters are included without quoting - PR welcome @malcolmsparks @dominicm?

PR welcome

You could disable stacks in production

probably a good idea in the short-term - how do i do that ?

do i have to provide a :responses map for every handler, or is there a global switch somewhere ?

there's a flag that can go on every resource, but you'll need to postwalk to do it

I've forgotten the name of the flag, has "stack" in I think