Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • L lebara-onboarding-frontend
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 0
    • Issues 0
    • List
    • Boards
    • Service Desk
    • Milestones
  • Jira
    • Jira
  • Merge requests 4
    • Merge requests 4
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • MobbScan-Integration
  • Lebara-Video
  • lebara-onboarding-frontend
  • Merge requests
  • !48

[LEBV-270] Apply security policies to NGINX conf

  • Review changes

  • Download
  • Email patches
  • Plain diff
Closed Abraham Holgado Garcia requested to merge fix/security_risks into develop Jul 08, 2020
  • Overview 1
  • Commits 2
  • Changes 1

Security risk report available in https://wiki.mobbeel.com/x/FwqR

Jira Issues:

LEBV-270

LEBV-271

I've only added a bunch of headers to the nginx configuration file, but to test it I've had to modified the environment.prod.ts to generate a docker image with the changed configuration so I can use it locally . The content of the file was:

export const environment = { production: true, customerAPIEndpoint: 'http://0.0.0.0:8080', googleAnalyticsID: 'UA-170647602-1', };

If you don't want to do that you just can pull the image mobbeelsolutions/lebara-video-customer-frontend:risk-latest that contains these changes to check that everything keeps working properly.

Edited Jul 09, 2020 by Abraham Holgado Garcia
Assignee
Assign to
Reviewer
Request review from
Time tracking
Source branch: fix/security_risks