FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
shiftleft-python-demo/run.py at master · ibmcloud-devops/shiftleft-python-demo · GitHub
ibmcloud-devops
/
shiftleft-python-demo
Public
forked from
ShiftLeftSecurity/shiftleft-python-demo
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
1
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Expand file tree
Breadcrumbs
shiftleft-python-demo
/
run.py
Copy path
More file actions
More file actions
Latest commit
History
History
History
14 lines (11 loc) · 404 Bytes
Breadcrumbs
shiftleft-python-demo
/
run.py
Copy path
File metadata and controls
14 lines (11 loc) · 404 Bytes
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
from
flask_webgoat
import
create_app
app
=
create_app
()
@
app
.
after_request
def
add_csp_headers
(
response
):
# vulnerability: Broken Access Control
response
.
headers
[
'Access-Control-Allow-Origin'
]
=
'*'
# vulnerability: Security Misconfiguration
response
.
headers
[
'Content-Security-Policy'
]
=
"script-src 'self' 'unsafe-inline'"
return
response
if
__name__
==
'__main__'
:
app
.
run
()
Back
|
FazBrowse Home
|
New Git URL