Re:Web Developer Security Checklist
by partycoder on Tuesday May 16, 2017 @01:56PM
(#14351728)
It's not a problem with the garbage collector, just how the objects are referenced. Basically you need to ensure the request reaches a terminal state where you either close the connection (ServerResponse.end) or send a response (ServerResponse.send and similar). All the cleanup happens after you do that.
[ Parent
| on HN ]
Re:Web Developer Security Checklist
by slackingoff2017 on Tuesday May 16, 2017 @07:24PM
(#14354258)
Is there not an OnDispose or some kind of hook to detect when requests can end? To end a request in every framework I've used you just return from your code back to the framework. You shouldn't have to worry about a framework object like request state.
Re:Web Developer Security Checklist
by partycoder on Wednesday May 17, 2017 @03:16AM
(#14356282)
There are ways to detect this, but since express declares itself as an "minimalistic, non-opinionated framework" it's up to you to do it and do it correctly, or have correctly implemented logic that does not run into this issue.