Dependabot Alert: Undici proxy-authorization header not cleared on cross-origin redirect in fetch

GSA / smartpay-website

SmartPay website

https://federalist-ab31a10d-375d-4040-9324-1ae94e8a36b9.sites.pages.cloud.gov/site/gsa/smartpay-website/

3 stars 0 forks source link

Dependabot Alert: Undici proxy-authorization header not cleared on cross-origin redirect in fetch #462

Open JennaySDavis opened 9 months ago

JennaySDavis commented 9 months ago

Undici already cleared Authorization headers on cross-origin redirects but did not clear Proxy-Authorization headers.

JennaySDavis commented 7 months ago

#462 Acceptance Criteria

Pass/Fail	Description
Pass	Smoke Testing of the Program Website

Comments/Additional Notes A Link checker was completed on the app - no broken links. Performance score will improve when the following ticket has been implemented: Improve performance by adding explicit height and width to image elements #378

ADA Compliance (Automated scan via Chrome Lighthouse)

Criteria	Score
Performance	99
Accessibility	100
Best Practices	100

Passed 04/26/2024 - JSD

LoraBradford commented 7 months ago

Understand that performance score will improve, moving to done. Thank you!