This is an automated email from the ASF dual-hosted git repository.
Aman-Mittal pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/fineract-loan-origination.git
from b289efc Merge pull request #83 from
KRYSTALM7/fix/typescript-6-peer-dependency
add 8b74fe5 feat(security): FINERACT-2442 input validation, tenant
isolation, rate limiting, XSS protection, and security headers
add d4a5b87 FINERACT-2442: replace deprecated permissionsPolicy() with
StaticHeadersWriter
new bb44b82 Merge pull request #78 from
KRYSTALM7/feature/FINERACT-2442-updates-security
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
pom.xml | 18 +
.../fineract/los/api/ApprovalController.java | 5 +-
.../los/api/CustomerLoanApplicationController.java | 7 +-
.../fineract/los/api/DisbursementController.java | 3 +-
.../los/api/LoanApplicationController.java | 9 +-
.../apache/fineract/los/config/SecurityConfig.java | 72 +++-
.../los/dto/request/ApprovalDecisionRequest.java | 8 +-
.../dto/request/CreateLoanApplicationRequest.java | 40 +-
.../fineract/los/security/CustomerPrincipal.java | 8 +-
.../los/security/FineractUserDetailsService.java | 2 +-
.../fineract/los/security/JwtAuthFilter.java | 24 +-
.../los/security/MockCustomerIdentityService.java | 2 +-
.../fineract/los/security/RateLimitFilter.java | 185 +++++++++
.../apache/fineract/los/security/XssSanitizer.java | 110 ++++++
.../los/validation/ValidApplicationRef.java | 73 ++++
.../los/validation/InputValidationTest.java | 427 +++++++++++++++++++++
16 files changed, 968 insertions(+), 25 deletions(-)
create mode 100644
src/main/java/org/apache/fineract/los/security/RateLimitFilter.java
create mode 100644
src/main/java/org/apache/fineract/los/security/XssSanitizer.java
create mode 100644
src/main/java/org/apache/fineract/los/validation/ValidApplicationRef.java
create mode 100644
src/test/java/org/apache/fineract/los/validation/InputValidationTest.java
