Enables comprehensive XSS protection by applying sanitization middleware to all incoming requests. Uses the sanitization utilities added in previous PR. Changes: - Added sanitizeBody() and sanitizeQuery() middleware after express.json() - Enhanced Content Security Policy headers for additional XSS protection - Added 'object-src: none' and 'base-uri: self' directives - All user inputs now automatically sanitized before processing Security improvements: - Prevents stored XSS attacks through HTML sanitization - Recursive sanitization handles nested objects and arrays - Maintains backward compatibility with existing functionality - Strengthened CSP headers block unsafe content injection Files changed: src/app.js (9 lines added) Risk level: Medium (global middleware application)
Checkmate backend
The backend service for Checkmate, an open source uptime and infrastructure monitoring application
This directory contains the backend of Checkmate, which handles data processing, storage, and API services for the Checkmate monitoring tool. The backend is responsible for managing uptime checks, handling real-time alerts, and storing historical monitoring data.
Checkmate's backend is designed to be lightweight and scalable, ensuring reliable performance even with a high number of active monitors.
Installation & documentation
For setup instructions, configuration details, and deployment guidelines, please visit our official documentation at docs.checkmate.so.
Related repositories
- Capture Agent (Optional, provides additional server insights)