eggjs / egg-security

Security plugin for egg, force performance too.
MIT License
238 stars 43 forks source link

feat: csrf support check origin header with referer type #69

Open anthinkingcoder opened 4 years ago

anthinkingcoder commented 4 years ago
Checklist
Affected core subsystem(s)
Description of change

csrf防范应该也可以通过检查Origin头来验证来源。具体可看 Identifying Source Origin (via Origin/Referer header)

codecov[bot] commented 4 years ago

Codecov Report

Merging #69 into master will not change coverage. The diff coverage is 100.00%.

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #69   +/-   ##
=======================================
  Coverage   95.89%   95.89%           
=======================================
  Files          32       32           
  Lines         560      560           
=======================================
  Hits          537      537           
  Misses         23       23           
Impacted Files Coverage Δ
app/extend/context.js 97.22% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 79c38e0...51d0223. Read the comment docs.