OWASP Header errors prevent content from loading correctly

ritz7 · June 28, 2023, 7:13am

I am trying to submit zoom app in marketplace. When the app was submitted I got a response from the Zoom team which is “OWASP Header errors prevent content from loading correctly.” and the below screenshot.

I tested the header and was able to see the ‘OWASP-Header’ in header response with 200 status code but after a while when we retest it the header was missing and status code was 304. Can someone please guide us understand what needs to be done? The home page is built on Framer-“https://www.framer.com/” while the actual app is built on Bubble “https://bubble.io/”.

elisa.zoom · June 28, 2023, 7:26pm

Hi @ritz7
Thanks for reaching out to us!
Have you taken a look into our Docs here:

Also, feel free to take a look at our sample app here:

github.com

zoom/zoomapps-advancedsample-react/blob/main/backend/server.js

'use strict'

require('./config')

const http = require('http')
const express = require('express')
const morgan = require('morgan')

const middleware = require('./middleware')

const zoomAppRouter = require('./api/zoomapp/router')
const zoomRouter = require('./api/zoom/router')
const thirdPartyOAuthRouter = require('./api/thirdpartyauth/router')
// Create app
const app = express()

// Set view engine (for system browser error pages)
app.set('view engine', 'pug')

// Set static file directory (for system browser error pages)

This file has been truncated. show original

Might help you as a reference as an example of valid headers

Topic		Replies	Views
Zoomapps-sample-js tutorial gives me a blank page, and an error of Missing OWASP Secure Headers Zoom Apps	13	1057	April 28, 2023
I have created the zoom app, it's still in the testing phase. When I try to open the app in the zoom client. It display the blank page Zoom Apps	13	914	November 20, 2022
Bug on streaming youtube (HEADERS) API and Webhooks	3	506	August 21, 2020
Unable to verify zoomverify.html Meeting bots	4	221	February 13, 2024
{"code":300,"message":"Unsupported Content Type"} API and Webhooks	2	963	August 21, 2020

OWASP Header errors prevent content from loading correctly

Related Topics