issues
search
krakenjs
/
lusca
Application security for express apps.
Other
1.78k
stars
123
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Error: CSRF token missing
#54
anjali-chadha
closed
9 years ago
9
IE and Safari block third-party cookies, by default causing csrf issues in iframe
#53
shaunwarman
closed
9 years ago
2
Test issue
#52
jeffharrell
closed
9 years ago
0
Updated HSTS to support the preload flag
#51
amotmot
closed
9 years ago
8
add grunt-cli as devDep
#50
jasisk
closed
1 year ago
0
classifying no csrf token as separate error than csrf mismatch
#49
skoranga
closed
9 years ago
5
A way to defer the header setup
#48
facundocabrera
opened
9 years ago
3
Remove "engineStrict" in preparation for npm 3+
#47
totherik
opened
9 years ago
17
Support using lusca.csrf() without a body
#46
ForbesLindesay
closed
9 years ago
2
Error pages
#45
mike-engel
closed
9 years ago
4
Update runtimes to extend test coverage.
#44
totherik
closed
9 years ago
0
Crypto could be improved for generating CSRF tokens
#43
aredridel
opened
9 years ago
1
Features found in helmet, not in lusca?
#42
gavinengel
closed
9 years ago
8
Need separate csrf token creation function
#41
HariHaraBalan
closed
9 years ago
1
bump to v1.0.2 in preparation to publish changes
#40
grawk
closed
9 years ago
2
Can't pass _csrf parameter via file upload
#39
soichih
closed
9 years ago
2
upgrade unit tests for express 4.x
#38
grawk
closed
9 years ago
2
Cannot read property '_csrfSecret' of undefined
#37
knownasilya
closed
9 years ago
3
Add csp example options
#36
knownasilya
closed
9 years ago
2
p3p value unclear
#35
knownasilya
opened
10 years ago
1
adding configurable secret key option, readme, and test
#34
grawk
closed
9 years ago
4
Removing the express peerDependency
#33
pvenkatakrishnan
closed
10 years ago
3
Removing the express peerDependency
#32
pvenkatakrishnan
closed
10 years ago
0
Fix closing parentheses in example code. Closes #30.
#31
aredridel
closed
10 years ago
0
Readme Update
#30
vernak2539
closed
10 years ago
2
Make session secret key configurable and don't default to `_...`
#29
ForbesLindesay
closed
9 years ago
10
Added option of verifying csrf token through custom http header
#28
anant-singh
closed
10 years ago
3
Support XSRF-TOKEN for AngularJS
#27
aozora
opened
10 years ago
17
Support koa style middleware
#26
fengmk2
closed
10 years ago
3
Consider adding SwitchUser behavior like Spring Framework
#25
mikesparr
closed
10 years ago
1
Express 4.* compatibility
#24
ninjatux
closed
10 years ago
0
SVG badges
#23
sahat
closed
10 years ago
0
Is there the ability for CSRF token built into Kraken to not use session store.
#22
trideepgogoi
closed
10 years ago
2
req.csrfToken() not available anymore
#21
vernak2539
closed
10 years ago
3
Handle boolean values properly in xss protection
#20
runk
closed
10 years ago
3
0.1.2 release
#19
runk
closed
10 years ago
9
Maybe CSP implementation is too naive?
#18
mstuart
closed
10 years ago
3
Correcting header value and implementation of report-uri
#17
bluelnkd
closed
10 years ago
5
Added travis-ci integration. Fixes #15
#16
lmarkus
closed
10 years ago
1
Hook up Travis-CI
#15
mstuart
closed
10 years ago
3
Add support for X-XSS-Protection header.
#14
mstuart
closed
10 years ago
12
Refactoring CSRF implementation
#13
jeffharrell
closed
10 years ago
7
correct copyright year
#12
alexsantos
closed
10 years ago
0
Add support for HSTS header. Issue #10
#11
rragan
closed
10 years ago
0
Add support for htst header
#10
jeffharrell
closed
10 years ago
1
Took error into account on superagent tests
#9
lmarkus
closed
10 years ago
0
Ignore CSRF on certain paths via config. Fixes #7
#8
lmarkus
closed
10 years ago
2
Disable CSRF for some paths
#7
lmarkus
closed
10 years ago
0
Migrated Makefile to Gruntfile to be consistent w/Kraken-js. +CHANGELOG
#6
sstedman
closed
10 years ago
2
Adding security policy
#5
jeffharrell
closed
10 years ago
0
Previous
Next