UNCLASSIFIED - NO CUI

Skip to content

Rest json vul

abhayashrestha requested to merge rest-json-vul into master
  • Avoiding Array as a top level JSON response vulnerability by adding new rest endpoints. Response for /api/secure/team, /api/secure/dashboard/, /api/secure/collector, and /api/secure/scopecollector/id will be in the form { result: [...data]}, as opposed to just [...data]
  • Testing the return value of the endpoints.
Edited by abhayashrestha

Merge request reports