(JAVA-S1000) Overly permissive CORS policies are a security risk

llTheBlankll / attendance-system-api-springboot

This project is an Attendance System API built using Spring Boot, WebSocket, and JWT Authentication. The system provides a robust solution for tracking and managing attendance records, with support for real-time updates through WebSocket communication. This attendance is based on the education system of the Philippines

GNU General Public License v3.0

5 stars 2 forks source link

(JAVA-S1000) Overly permissive CORS policies are a security risk #15

Closed llTheBlankll closed 3 weeks ago

llTheBlankll commented 3 weeks ago

Description

An overly permissive CORS policy can allow malicious actors to retrieve sensitive data from your own servers through the client.

Occurrences

There is 1 occurrence of this issue in the repository.

See all occurrences on DeepSource → app.deepsource.com/gh/llTheBlankll/attendance-system-api-springboot/issue/JAVA-S1000/occurrences/