issues Search Results · language:Dune language:JavaScript language:Java language:Java language:Java linked:pr
Filter by
3.2M results
Summary
POST /api/jobs in apps/api/src/routes/jobRoutes.js has no authMiddleware. Any unauthenticated user can create job
postings.
Impact
- Anonymous users can spam job listings
- No audit trail ...
XananasX7
Summary
app.use(cors()) in apps/api/src/app.js uses no origin restriction, effectively setting Access-Control-Allow-Origin: *.
This allows any domain to make credentialed cross-origin requests to the ...
Describe the bug
MessageDigest.getInstance( SHA512 ) returns null on some JDK (e.g. IBM Semeru 8). OpenJ9-based OpenJDK 8 strict
implementation only recognizes SHA-512 as a valid algorithm name. SHA512 ...
release bug
karel-harjono
Bug
Two related display bugs in devteam advise option descriptions, both in generateOptions in core/advise.js.
1. Wrong option letter in the ticket hint for PEER_REVIEW_RISK items
ticketHint is computed ...
bug
mumit-khan
Bug: Refresh Token Not Validated
Description: The POST /api/auth/refresh endpoint calls refreshToken() with no arguments. The service function ignores
any refresh token from the request body and simply ...
Buyurgutdev
Summary
Add raw WASI preview1 fd_pwrite(fd, iovs, iovs_len, offset, nwritten) - errno support to the browser raw WASI executor.
Scope
- Support positioned writes to open writable /tmp scratch regular ...
Doout
WordPress should declare its agent-task default backend as extension policy instead of relying on the WP Codebox
runtime/provider manifest to mark itself default.
Acceptance criteria:
- wordpress/wordpress.json ...
chubes4
Perform minor optimization and flow tracking inside SimulationToolbar.vue.
Dengjiangpeng666
In the custom node, com.victronenergy.platform is absent, while com.victronenergy.system and
com.victronenergy.dynamicess appear with a spurious (0) suffix.
dirkjanfaber
Bug: Missing Authentication on Job Creation
Description: The POST /api/jobs endpoint does not require authentication. Anyone can create job listings without being
logged in.
File: apps/api/src/routes/jobRoutes.js ...
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.