Skip to content
#

remotestorage

Star

Here are 53 public repositories matching this topic...

Language: All
Filter by language
All 53 JavaScript 33 HTML 4 Elm 2 TypeScript 2 EJS 1 Go 1 Haskell 1 Java 1 PHP 1 Ruby 1
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated
armadietto

remotestorage / armadietto

Star 85
Open

In Production mode, responses should not leak information

2
DougReeder
DougReeder commented Feb 1, 2022

When NODE_ENV=production is set in the environment

  • "Username not found" -> "The user name and password don't match"
  • "Incorrect password" -> "The user name and password don't match"
  • error.message should never be displayed, only an appropriate message or "An error occurred".

Other responses might need to be changed as well.

The log must still contain the details we hide from end u

Read more
enhancement good first issue

Improve this page

Add a description, image, and links to the remotestorage topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the remotestorage topic, visit your repo's landing page and select "manage topics."

Learn more