Merge pull request #431 from DedunuKarunarathne/master

Fix security vulnerabilities
wso2 · Oct 31, 2024 · e67e6b0 · e67e6b0
2 parents f39d4fe + 32013fa
commit e67e6b0
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 6 deletions.
diff --git a/...shboard.bootstrap/src/main/java/org/wso2/ei/dashboard/bootstrap/SecurityHeaderFilter.java b/...shboard.bootstrap/src/main/java/org/wso2/ei/dashboard/bootstrap/SecurityHeaderFilter.java
@@ -49,6 +49,7 @@ public void doFilter(ServletRequest servletRequest, ServletResponse servletRespo
         httpResponse.addHeader("Referrer-Policy", "same-origin");
         httpResponse.addHeader("X-XSS-Protection", "1; mode=block");
         httpResponse.addHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
+        httpResponse.addHeader("Cache-Control", "no-cache, no-store, must-revalidate");
         filterChain.doFilter(servletRequest, servletResponse);
 
     }

diff --git a/...2.ei.dashboard.core/src/main/java/org/wso2/ei/dashboard/core/commons/utils/HttpUtils.java b/...2.ei.dashboard.core/src/main/java/org/wso2/ei/dashboard/core/commons/utils/HttpUtils.java
@@ -319,7 +319,8 @@ public static void setHeaders(Response.ResponseBuilder responseBuilder) {
                 .header("X-Content-Type-Options", "nosniff")
                 .header("Referrer-Policy", "same-origin")
                 .header("X-XSS-Protection", "1; mode=block")
-                .header("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload");
+                .header("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload")
+                .header("Cache-Control", "no-cache, no-store, must-revalidate");
     }
 
 }
diff --git a/...ng-dashboard/components/org.wso2.micro.integrator.dashboard.web/web-app/package-lock.json b/...ng-dashboard/components/org.wso2.micro.integrator.dashboard.web/web-app/package-lock.json
diff --git a/monitoring-dashboard/components/org.wso2.micro.integrator.dashboard.web/web-app/package.json b/monitoring-dashboard/components/org.wso2.micro.integrator.dashboard.web/web-app/package.json
@@ -11,7 +11,7 @@
     "@testing-library/jest-dom": "^5.11.4",
     "@testing-library/react": "^11.1.0",
     "@testing-library/user-event": "^12.1.10",
-    "axios": "^0.21.4",
+    "axios": "^1.7.7",
     "jwt-decode": "^3.1.2",
     "monaco-editor": "^0.38.0",
     "react": "^16.14.0",