|
|
@@ -37,7 +37,7 @@ files .init (common); |
|
|
|
*/ |
|
|
|
|
|
|
|
// Security |
|
|
|
app.disable ('x-powered-by'); // TODO: recherche warum? |
|
|
|
app.disable ('x-powered-by'); // TODO: Disable Header information: Powerd by Express -> Information disclosure |
|
|
|
|
|
|
|
|
|
|
|
/* |
|
|
@@ -74,7 +74,7 @@ app.use (bodyParser.urlencoded({extended: true})); |
|
|
|
//app.use ('/api', api_routes); |
|
|
|
|
|
|
|
// Static Files |
|
|
|
app.use (express.static(__dirname + '/public')); |
|
|
|
app.use (express.static(__dirname + '/public')); // Allow server access to 'public' folder |
|
|
|
|
|
|
|
// Other stuff is NOT authorized unless logged in |
|
|
|
//app.use (authorize.genCheckAuthorized ('user')); |