Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependabot Alert: Astro's server source code is exposed to the public if source maps are enabled #725

Open
JennaySDavis opened this issue Jan 2, 2025 · 2 comments
Open

Dependabot Alert: Astro's server source code is exposed to the public if source maps are enabled #725

JennaySDavis opened this issue Jan 2, 2025 · 2 comments
Assignees
@johnbeallgsa
Labels
Dependabot Alert Sprint 47

Comments

@JennaySDavis
Copy link
Contributor

JennaySDavis commented Jan 2, 2025 •
edited
Loading

A bug in the build process allows any unauthenticated user to read parts of the server source code.
@JennaySDavis
Copy link
Contributor Author

725 Acceptance Criteria

Pass/Fail Description
Pass Regression Testing of Training

Comments/Additional Notes
N/A

ADA Compliance (Automated scan via Chrome Lighthouse)

Criteria Score
Performance 99
Accessibility 100
Best Practices 100

Passed 01/17/2025 - JSD

@johnbeallgsa
Copy link

Thanks for showing/explaining this during Demo. Moving to Done.

felder101 added a commit that referenced this issue Jan 23, 2025
@felder101
Production Release
84cfbdf 
Sprint 47 issues includes:
Dependabot Alert: Atro CSRF Middleware Bypass (security.checkOrigin) #720
Dependabot Alert: Astro's server source code is exposed to the public if source maps are enabled #725
Update to the latest version of USWDS 3.11.0 #722
BUG: Training Report - Selecting an Agency w/o Bureau No Results Returned #728
Update SMTP to reflect GSA IT naming convention standard #736
@felder101 felder101 mentioned this issue Jan 23, 2025
Merged
felder101 added a commit that referenced this issue Jan 24, 2025
@felder101
Production Release (#743)
6f089f3 
Sprint 47 issues includes:
Dependabot Alert: Atro CSRF Middleware Bypass (security.checkOrigin) #720
Dependabot Alert: Astro's server source code is exposed to the public if source maps are enabled #725
Update to the latest version of USWDS 3.11.0 #722
BUG: Training Report - Selecting an Agency w/o Bureau No Results Returned #728
Update SMTP to reflect GSA IT naming convention standard #736
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@johnbeallgsa johnbeallgsa

Labels
Dependabot Alert Sprint 47
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@johnbeallgsa @JennaySDavis