yada

deva 2019-05-02T15:17:26.027400Z

Hello All, I have a question on recommended way of using yada. I know there is a edge repository, but I am little confused on the overall project structure. How does the overall project structure look like. Appreciate if any one points me to open example which is based on edge

mccraigmccraig 2019-05-02T15:21:02.029700Z

our pentest contractors just logged an XSS vulnerability relating to yada error messages - when a request fails parameter validation and an HTML 400 response is generated, the failing parameters are included without quoting - PR welcome @malcolmsparks @dominicm?

dominicm 2019-05-02T15:27:18.029900Z

PR welcome

dominicm 2019-05-02T15:27:49.030700Z

You could disable stacks in production

mccraigmccraig 2019-05-02T15:29:17.031200Z

probably a good idea in the short-term - how do i do that ?

mccraigmccraig 2019-05-02T15:30:35.031700Z

do i have to provide a :responses map for every handler, or is there a global switch somewhere ?

dominicm 2019-05-02T15:58:44.032100Z

there's a flag that can go on every resource, but you'll need to postwalk to do it

dominicm 2019-05-02T15:59:20.032500Z

I've forgotten the name of the flag, has "stack" in I think