DRF Spectacular: Enable sidecar by default#9645
Conversation
Contextual Security AnalysisAs DryRun Security performs checks, we’ll summarize them here. You can always dive into the detailed results in the section below for checks.
Chat with your AI-powered Security Buddy by typing Install and configure more repositories at DryRun Security |
|
@mtesauro there has been some developments in this area. The swagger UI project has implemented a fix, and is targeting a release on Monday, so this issue should resolve itself upstream without any action from us. However, I think it may be wise to start pinning the swagger UI version via the sidecar app. They release monthly, so we could have a higher chance of catching things like this before we do our releases. Here is a link to a similar response in the issue: #9629 (comment) |
|
@Maffooch Yeah, I agree that pinning makes sense to allow us to handle situations like this more gracefully. |
Most of the endpoints in the drf-spectacular docs do not have any meaningful examples or response bodies present. This makes the API much more difficult to use. fixes #9629
[sc-4511]