wikimedia / restbase / 960

pending completion

Build # 960

Build Type

Pull #228

travis-ci

Committed by

gwicke

Commit Message

Add security headers in non-JSON responses

In modern browsers these headers help to avoid some of the most common
client-side security issues even if we missed something in our HTML and SVG
sanitization code.

I left out X-Frame-Options for now until we have checked with the VE team that
this will be compatible with their HTML parsing technique, which at least at
some point made use of iframes.

Bug: https://phabricator.wikimedia.org/T95443

Pull Request Pull Request #228: Add security headers in non-JSON responses

Run Details

11 of 11 new or added lines in 1 file covered. (100.0%)

836 of 963 relevant lines covered (86.81%)

144.43 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

82.4

/lib/server.js

Build SHA Not Found

The commit SHA "adcd48fef37ef4524c7c54af3b64f1c015ff1eb1" was not found in your repository, so the file cannot be loaded. This may be because you posted from a local development environment, or your CI created an ephemeral commit.

wikimedia / restbase / 960

Source File Press 'n' to go to next uncovered line, 'b' for previous

Build SHA Not Found

Source File
Press 'n' to go to next uncovered line, 'b' for previous