feat(nano-server): clear debug info from client for security reasons.

Alwatr · Dec 18, 2022 · 5814af2 · 5814af2
1 parent 02639a2
commit 5814af2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/core/nano-server/src/nano-server.ts b/core/nano-server/src/nano-server.ts
@@ -334,6 +334,11 @@ export class AlwatrConnection {
       throw new Error('http_header_sent');
     }
 
+    if (!this._logger.debug && !content.ok && content.meta) {
+      // clear debug info from client for security reasons.
+      delete content.meta;
+    }
+
     let buffer: Buffer;
 
     try {