From adde990d87127554278e9a76ecd81ffb5b0fe54e Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Tue, 30 Jan 2024 15:24:28 +0530 Subject: [PATCH] formatting fix --- http/misconfiguration/node-express-dev-env.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/http/misconfiguration/node-express-dev-env.yaml b/http/misconfiguration/node-express-dev-env.yaml index e166d092bb..ea8ed50729 100644 --- a/http/misconfiguration/node-express-dev-env.yaml +++ b/http/misconfiguration/node-express-dev-env.yaml @@ -4,11 +4,11 @@ info: name: Node.js Express NODE_ENV Development Mode author: FLX severity: medium + description: | + The Node.js application runs in development mode, which can expose sensitive information, such as source code and secrets, depending on the application. reference: - https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/express-development-mode-is-enabled/ - https://www.synopsys.com/blogs/software-security/nodejs-mean-stack-vulnerabilities.html - description: | - The Node.js application runs in development mode, which can expose sensitive information, such as source code and secrets, depending on the application. metadata: max-request: 2 verified: true