35 lines
769 B
Plaintext
35 lines
769 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
https://www.npmjs.com/package/errorhandler[errorhandler Express.js middleware] should not be used in production:
|
|
|
|
----
|
|
const express = require('express');
|
|
const errorhandler = require('errorhandler');
|
|
|
|
let app = express();
|
|
app.use(errorhandler()); // Sensitive
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
https://www.npmjs.com/package/errorhandler[errorhandler Express.js middleware] used only in development mode:
|
|
|
|
----
|
|
const express = require('express');
|
|
const errorhandler = require('errorhandler');
|
|
|
|
let app = express();
|
|
|
|
if (process.env.NODE_ENV === 'development') { // Compliant
|
|
app.use(errorhandler()); // Compliant
|
|
}
|
|
----
|
|
|
|
include::../see.adoc[]
|