JavaScript Security Web and Headers Audit Bundle
Run a read-only JavaScript and TypeScript security audit focused on web middleware, headers, CSRF, CORS, request limits, file uploads, debug output, and error exposure risks.
This bundle covers web middleware, headers, csrf, cors, request limits, file uploads, debug output, and error exposure risks.
Included Codemods
- @codemod/detect-disabled-csp-fetch-rules@0.1.0
- @codemod/detect-disabled-csrf-protection-ts@0.1.0
- @codemod/detect-disabled-hsts-in-express-ts@0.1.0
- @codemod/detect-injectable-cors-origin-policies@0.1.0
- @codemod/detect-missing-nosniff-header-node@0.1.0
- @codemod/detect-missing-request-size-limits@0.1.0
- @codemod/detect-sensitive-data-in-get-queries@0.1.0
- @codemod/detect-static-assets-serving-cookies@0.1.0
- @codemod/detect-unsafe-referrer-policy-header@0.1.0
- @codemod/detect-world-readable-writable-modes@0.1.0
- @codemod/restricted-file-upload-handlers@0.1.0
- @codemod/typescript-production-debug-flags@0.1.0
- @codemod/typescript-stack-trace-exposure@0.1.0
Coverage
- 13 codemods