issues Search Results · language:Dune language:JavaScript language:JavaScript language:JavaScript language:Go language:Java
Filter by
38.8M results
Description
Write a test that asserts unhandled exceptions return a structured error response (not a raw Spring Whitelabel error
page with stack trace) and do not expose internal implementation details. ...
Description
Add @NotBlank, @Size, @Pattern, and other Bean Validation constraints to the Owner, Pet, and Visit model classes, and
add @Valid to the corresponding controller method parameters so Spring ...
Description
Write tests that assert the OwnerController rejects invalid input (blank firstName, blank lastName, invalid phone
format) with HTTP 400 and validation error messages, not 500. These tests ...
Description
Refactor ManagementController to use constructor injection instead of @Autowired field injection, making the dependency
explicit, immutable, and testable. This is a security-adjacent code ...
Description
Extend the SecurityConfig to explicitly configure Content-Security-Policy, X-Frame-Options (DENY),
X-Content-Type-Options (nosniff), and Strict-Transport-Security headers on all responses, ...
Description
Write tests that assert every HTTP response includes the required security headers: Content-Security-Policy,
X-Frame-Options, X-Content-Type-Options, and Strict-Transport-Security. These tests ...
Description
Ensure all HTML forms in Thymeleaf templates include the Thymeleaf Spring Security CSRF token integration so that form
submissions include the CSRF token automatically. Add the thymeleaf-extras-springsecurity6 ...
Description
Write tests that assert POST requests to state-changing endpoints without a CSRF token receive 403 Forbidden, and POST
requests with a valid CSRF token succeed. These tests verify CSRF protection ...
Description
Create a SecurityConfig class that configures form-based login, defines user roles (ADMIN, VET, OWNER), restricts
/management/** to ADMIN role, and permits public access only to static resources ...
Description
Write integration tests that assert: unauthenticated requests to all major endpoints return 302 redirect to /login,
authenticated requests with valid credentials succeed, and the /management/revenue ...

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.