Express.js Get HTTP POST json params

Express.js Get HTTP POST json params.md

Express.js Get HTTP POST json params

https://stackabuse.com/get-http-post-body-in-express-js/

https://stackoverflow.com/questions/5710358/how-to-access-post-form-fields

https://codeforgeek.com/handle-get-post-request-express-4/

CSP

内容安全策略

connect-src

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src

express.js & Content-Security-Policy: connect-src

res.set("Content-Security-Policy", "default-src 'self'");

https://content-security-policy.com/examples/express-js/

app.use(function(req, res, next) {
    res.setHeader("Content-Security-Policy", "script-src 'self' https://apis.google.com");
    return next();
});

https://stackoverflow.com/questions/21048252/nodejs-where-exactly-can-i-put-the-content-security-policy

demo

app.use(function (req, res, next) {
  // JSON parse
  // console.log('req.body', req.body);
  // CORS bug
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
  // res.header("Content-Security-Policy", "connect-src *");
  res.header("Content-Security-Policy", "connect-src '*'");
  // res.header("Content-Security-Policy", "connect-src localhost");
  // Content-Security-Policy: connect-src <source>;
  // Content-Security-Policy: connect-src <source> <source>;
  // res.header('Content-Type', 'application/json');
  // res.setHeader('Content-Type', 'application/json');
  next();
});

https://stackoverflow.com/questions/32986074/content-security-policy-meta-tag-for-allowing-web-socket

http://127.0.0.1:3000/api/get?q={%22username%22:%22xgqfrms%22,%22member_since%22:%222012-10-21T05:26:39.239Z%22,%22total_score%22:182160,%22avatar%22:%22https://secure.gravatar.com/avatar/e7b8d8946d71e52d2670e0def364997a.jpg%22}

https://www.digitalocean.com/community/tutorials/how-to-secure-node-js-applications-with-a-content-security-policy

https://ponyfoo.com/articles/content-security-policy-in-express-apps

http://localhost:3000/api/get?q={%22username%22:%22xgqfrms%22}

http://127.0.0.1:3000/api/get?q={%22username%22:%22xgqfrms%22}

http://localhost:3000/api/get?q={%22username%22:%22xgqfrms%22}

fetch(`http://localhost:3000/api/post`, {
    body: JSON.stringify({key: "value"}),
    cache: "no-cache",
    headers: {
        "Content-Type": "application/json",
    },
    method: "POST",
    mode: "cors",
})
.then(res => {
   console.log(`res =`, res)
   return res.json()
})
// .then(res => res.json())
.then(json => console.log(`json =`, json))
.catch(err => console.error(`error =`, err));