@@ -8,9 +8,9 @@ import Config from '../../Config';
88import Parse from 'parse/node' ;
99
1010/**
11- * The security checks group for Parse Server configuration.
12- * Checks common Parse Server parameters such as access keys.
13- */
11+ * The security checks group for Parse Server configuration.
12+ * Checks common Parse Server parameters such as access keys.
13+ */
1414class CheckGroupServerConfig extends CheckGroup {
1515 setName ( ) {
1616 return 'Parse Server Configuration' ;
@@ -21,8 +21,7 @@ class CheckGroupServerConfig extends CheckGroup {
2121 new Check ( {
2222 title : 'Secure master key' ,
2323 warning : 'The Parse Server master key is insecure and vulnerable to brute force attacks.' ,
24- solution :
25- 'Choose a longer and/or more complex master key with a combination of upper- and lowercase characters, numbers and special characters.' ,
24+ solution : 'Choose a longer and/or more complex master key with a combination of upper- and lowercase characters, numbers and special characters.' ,
2625 check : ( ) => {
2726 const masterKey = config . masterKey ;
2827 const hasUpperCase = / [ A - Z ] / . test ( masterKey ) ;
@@ -42,7 +41,7 @@ class CheckGroupServerConfig extends CheckGroup {
4241 new Check ( {
4342 title : 'Security log disabled' ,
4443 warning : 'Security checks in logs may expose vulnerabilities to anyone access to logs.' ,
45- solution : " Change Parse Server configuration to 'security.enableCheckLog: false'." ,
44+ solution : ' Change Parse Server configuration to \ 'security.enableCheckLog: false\'.' ,
4645 check : ( ) => {
4746 if ( config . security && config . security . enableCheckLog ) {
4847 throw 1 ;
@@ -51,9 +50,8 @@ class CheckGroupServerConfig extends CheckGroup {
5150 } ) ,
5251 new Check ( {
5352 title : 'Client class creation disabled' ,
54- warning :
55- 'Attackers are allowed to create new classes without restriction and flood the database.' ,
56- solution : "Change Parse Server configuration to 'allowClientClassCreation: false'." ,
53+ warning : 'Attackers are allowed to create new classes without restriction and flood the database.' ,
54+ solution : 'Change Parse Server configuration to \'allowClientClassCreation: false\'.' ,
5755 check : ( ) => {
5856 if ( config . allowClientClassCreation || config . allowClientClassCreation == null ) {
5957 throw 1 ;
0 commit comments