Add a `per` export type in the server and generate the PER Country page preparedness tab PDF export
Closed this issue · 0 comments
samshara commented
I suggest we also refactor the export endpoint as following
The client sends only the following information
- export_type
- identifier
The server should have a static configuration to save information regarding exports
For example
- client
- DREF export
- url-format:
/dref-applications/{}/export
- url-selector: '#pdf-preview-ready`
- url-format:
.... and others
- We also need to support a white list for the
client
field, as of right now it can be anything as configured in the client. - We also need a separate environment variable on the client side to determine if we must use the currently deployed front-end for export. This can be
true
only for thetesting
environment.
The PDF export could have a security vulnerability as explained in https://blog.projectdiscovery.io/abusing-reverse-proxies-metadata/
cc @thenav56