Skip to content

issues Search Results · language:Edge language:TypeScript language:HTML language:PHP language:Java language:JavaScript

Filter by

61M results  (827 ms)

61M results

touchfish1/ZY_Foundation_Yingzhi
P2: Gateway CORS配置需确认安全白名单

缺陷描述 需确认 Gateway CORS 是否配置了特定域名白名单而非通配符 * 优化方案 Gateway 配置 CORS 指定明确的前端域名白名单 涉及文件 backend/gateway/src/main/resources/application.yml 来源 SEC-003
bug
P2
  • touchfish1
  • 1
  • Opened 
    46 minutes ago
  • #16

touchfish1/ZY_Foundation_Yingzhi
P2: 缺少统一异常处理全局拦截器

缺陷描述 各微服务可能未实现统一 @RestControllerAdvice，DB异常暴露堆栈 优化方案 每个微服务实现全局异常处理器，统一返回 {code, message, data} 来源 SEC-002
bug
P2
  • touchfish1
  • 1
  • Opened 
    46 minutes ago
  • #15

fish2018/webhtv
WebHome广场(网友自制推荐)

  • fish2018
  • Opened 
    46 minutes ago
  • #13

touchfish1/ZY_Foundation_Yingzhi
P2: 文件上传缺少MIME类型和大小校验

缺陷描述 文件上传未限制 MIME 类型和文件大小 优化方案 1. 白名单 MIME 类型: image/, application/pdf, text/ 2. 限制大小: spring.servlet.multipart.max-file-size=50MB 3. UUID 重命名防止路径覆盖 涉及文件 backend/api/.../asset/AdminAssetController.java ...
bug
P2
  • touchfish1
  • 1
  • Opened 
    46 minutes ago
  • #14

touchfish1/ZY_Foundation_Yingzhi
P2: 重复注册邮箱返回500而非友好409提示

缺陷描述 同邮箱重复注册时可能抛出 DataIntegrityViolationException 返回500 已在 SaasUserApplicationService.register() 第26行做了 existsByEmail 检查 需确认异常时返回格式是否正确(IllegalArgumentException 是否被全局异常处理器转换为友好消息) 涉及文件 backend/user-service/.../SaasUserApplicationService.java ...
bug
P2
  • touchfish1
  • 1
  • Opened 
    46 minutes ago
  • #12

touchfish1/ZY_Foundation_Yingzhi
P2: 系统设置值未限制长度(text类型可写入超大数据)

缺陷描述 setting_value 为 text 类型，无长度限制 优化方案 对 text 字段增加 @Size(max = 65535) 校验 涉及文件 backend/system-service/.../adapter/in/rest/SystemSettingAdminController.java 来源 TC-SYS-002
bug
P2
  • touchfish1
  • 1
  • Opened 
    46 minutes ago
  • #13

Shiv24angi/EcoVerse
[SECURITY] : Firebase credentials exposed in source code

The Firebase configuration in lib/firebase.ts contains hardcoded credentials including the API key, app ID, measurement ID, and messaging sender ID. These values are committed directly to the repository ...
  • dynamo-pentester
  • 2
  • Opened 
    46 minutes ago
  • #18

touchfish1/ZY_Foundation_Yingzhi
P2: 发布草稿未校验内容完整性(空草稿/无效区块类型)

缺陷描述 直接发布空草稿或含无效区块类型的页面可能引发 NPE 优化方案 发布前校验 draft_version_id 不为空、content_json 中 block type 均为有效注册类型 涉及文件 backend/api/.../CmsPageTranslationService.java 来源 TC-CMS-003
bug
P2
  • touchfish1
  • 1
  • Opened 
    46 minutes ago
  • #11

ihsan-project/maktabah-next
create stories

allow users to create and publish their own collection of verses
  • mmislam101
  • Opened 
    46 minutes ago
  • #73

yonghyeun/blog-app
infra: skill contract validator CI gate 편입

Intended labels type:infra, kind:leaf, status:intake, priority:p1, area:ci, area:ops, area:docs Parent - Parent: #88 - Sub-issue of: #88 - Depends on: #106 Relationship Parent: #88 Sub-issue ...
area:ci
area:docs
area:ops
kind:leaf
priority:p1
status:review
type:infra
  • yonghyeun
  • 1
  • Opened 
    46 minutes ago
  • #113
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.