mirror of
https://github.com/laramies/theHarvester.git
synced 2026-09-22 01:24:56 +02:00
- Introduced comprehensive security tests, including CORS configuration, XML injection prevention, path traversal prevention, and information disclosure protection. - Improved input sanitization for filenames and XML content to mitigate injection attacks and ensure safe handling. - Updated CORS middleware to restrict HTTP methods and block credentials with wildcard origins. - Removed traceback exposure in API error responses, even in debug mode. - Verified rate limiting and input validation for sensitive API endpoints. - Ensured no hardcoded secrets are present in the main codebase.