Feature/wallet app #22
Conversation
Date: Sun Apr 7 13:29:56 2024 +0530
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| const routes = app => { | ||
| app.use(express.json({limit: '16kb'})); | ||
| app.use(cookieParser()); |
Check failure
Code scanning / CodeQL
Missing CSRF middleware High
| const LocalStorage = { | ||
| get(key) { | ||
| const item = localStorage.getItem(key); | ||
| return item ? JSON.parse(item) : 'null'; |
Check failure
Code scanning / CodeQL
Hard-coded credentials Critical
| const {filter = '', page = 1, limit = 10} = req.query; | ||
|
|
||
| // This regex matches each word in a name starting with "filter". | ||
| const regex = new RegExp(`\\b${filter}`, 'i'); |
Check failure
Code scanning / CodeQL
Regular expression injection High
| const recipientWallet = await Wallet.findOne({ | ||
| userId: recipientId, | ||
| }).session(session); |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources High
| ).session(session); | ||
|
|
||
| await Wallet.updateOne( | ||
| {userId: recipientId}, |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources High
|
|
||
| const {name, email, password} = req.body; | ||
|
|
||
| let user = await User.findOne({email}); |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources High
|
|
||
| const {email, password} = req.body; | ||
|
|
||
| const user = await User.findOne({email}); |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources High
Week-8 MERN + Tailwind Project