sanitization to all api routes
This commit is contained in:
@@ -67,6 +67,7 @@ const {
|
|||||||
addRequestId,
|
addRequestId,
|
||||||
sanitizeError,
|
sanitizeError,
|
||||||
} = require("./middleware/security");
|
} = require("./middleware/security");
|
||||||
|
const { sanitizeInput } = require("./middleware/validation");
|
||||||
const { generalLimiter } = require("./middleware/rateLimiter");
|
const { generalLimiter } = require("./middleware/rateLimiter");
|
||||||
const errorLogger = require("./middleware/errorLogger");
|
const errorLogger = require("./middleware/errorLogger");
|
||||||
const apiLogger = require("./middleware/apiLogger");
|
const apiLogger = require("./middleware/apiLogger");
|
||||||
@@ -134,6 +135,9 @@ app.use(
|
|||||||
})
|
})
|
||||||
);
|
);
|
||||||
|
|
||||||
|
// Apply input sanitization to all API routes (XSS prevention)
|
||||||
|
app.use("/api/", sanitizeInput);
|
||||||
|
|
||||||
// Serve static files from uploads directory with CORS headers
|
// Serve static files from uploads directory with CORS headers
|
||||||
app.use(
|
app.use(
|
||||||
"/uploads",
|
"/uploads",
|
||||||
|
|||||||
Reference in New Issue
Block a user