Skip to content
Snippets Groups Projects

Adding toDo app functionability

Merged Jesus Galaz Reyes requested to merge 2-build-javascript-core-functionality into main
1 file
+ 0
15
Compare changes
  • Side-by-side
  • Inline
+ 0
15
@@ -2,7 +2,6 @@ const express = require('express');
@@ -2,7 +2,6 @@ const express = require('express');
const path = require('path');
const path = require('path');
const connectDB = require('./mongodb');
const connectDB = require('./mongodb');
const session = require('express-session');
const session = require('express-session');
const url = require('url');
const app = express();
const app = express();
@@ -10,20 +9,6 @@ const app = express();
@@ -10,20 +9,6 @@ const app = express();
app.use(express.json());
app.use(express.json());
app.use(express.static(path.join(__dirname, 'public')));
app.use(express.static(path.join(__dirname, 'public')));
// Allow only localhost for SSRF protection
function validateLocalhost(req, res, next) {
const remoteAddress = req.connection.remoteAddress;
// Allow requests only from localhost (IPv4 and IPv6)
if (remoteAddress !== '127.0.0.1' && remoteAddress !== '::1') {
return res.status(403).send('External requests are forbidden');
}
next();
}
app.use(validateLocalhost); // Add the middleware
// Session configuration
// Session configuration
app.use(
app.use(
session({
session({
Loading