search

mariannemyers / slush-marklogic-dotnet

slush generator for an Angular/ASP.NET Core/MarkLogic application
Other
0 stars 0 forks source link

Update SearchController to not be a straight-through /v1/ proxy #25

Closed mariannemyers closed 7 years ago

mariannemyers commented 7 years ago

Currently the SearchController allows all requests to /v1/ to proxy through. Use a whitelist approach similar to what was done for the slush-marklogic-node project to be more restrictive.

mariannemyers commented 7 years ago

Using a single Route decorator was surprisingly effective for this. Proxy through only valid /v1/ paths.