-
Notifications
You must be signed in to change notification settings - Fork 34
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Add security tests for header and log injection via pair path parameters
area:securitysecuritysecurityGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:highHigh priorityHigh prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:testTest coverage workTest coverage workStatus: Open.#364 In StableRoute-Org/Stableroute-backend;Use constant-time comparison for API key and admin token verification
area:authauthauthGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:highHigh priorityHigh prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:securitySecurity hardening / fixSecurity hardening / fixStatus: Open.#363 In StableRoute-Org/Stableroute-backend;Store API keys as salted hashes instead of retaining recoverable material
area:authauthauthGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:highHigh priorityHigh prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:securitySecurity hardening / fixSecurity hardening / fixStatus: Open.#362 In StableRoute-Org/Stableroute-backend;Split the oversized index test suite into focused per-route files
area:testingtestingtestingGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:testTest coverage workTest coverage workStatus: Open.#361 In StableRoute-Org/Stableroute-backend;Add a shared supertest app factory to remove setup duplication across tests
area:testingtestingtestingGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:testTest coverage workTest coverage workStatus: Open.#360 In StableRoute-Org/Stableroute-backend;Enable stricter TypeScript compiler flags across the source tree
area:typescripttypescripttypescriptGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:refactorRefactor without behavior changeRefactor without behavior changeStatus: Open.#359 In StableRoute-Org/Stableroute-backend;Add a typed async handler wrapper to remove repeated try/catch in route handlers
area:httphttphttpGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:refactorRefactor without behavior changeRefactor without behavior changeStatus: Open.#358 In StableRoute-Org/Stableroute-backend;Derive the webhook event allowlist from KNOWN_EVENT_TYPES instead of a separate list
area:webhookswebhookswebhooksGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:refactorRefactor without behavior changeRefactor without behavior changeStatus: Open.#357 In StableRoute-Org/Stableroute-backend;Extract the quote pricing math into a pure, dependency-free pricing module
area:pricingpricingpricingGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:highHigh priorityHigh prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:refactorRefactor without behavior changeRefactor without behavior changeStatus: Open.#356 In StableRoute-Org/Stableroute-backend;Write a troubleshooting guide mapping every error code to a cause and remedy
area:docsdocsdocsGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:docsDocumentationDocumentationStatus: Open.#355 In StableRoute-Org/Stableroute-backend;Write a rate-limiting guide covering buckets, configuration, and response headers
area:docsdocsdocsGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:docsDocumentationDocumentationStatus: Open.#354 In StableRoute-Org/Stableroute-backend;Document the Idempotency-Key contract and cache semantics
area:docsdocsdocsGRANTFOX OSSGrantFox open-source campaign taskGrantFox open-source campaign taskMAYBE REWARDEDMay be rewarded under the GrantFox campaignMay be rewarded under the GrantFox campaignOFFICIAL CAMPAIGNOfficial GrantFox campaign issueOfficial GrantFox campaign issueOfficial Campaign | FWC26GrantFox FWC26 official campaignGrantFox FWC26 official campaignpriority:mediumMedium priorityMedium prioritystack:nodejsNode.jsNode.jsstack:typescriptTypeScriptTypeScripttype:docsDocumentationDocumentationStatus: Open.#353 In StableRoute-Org/Stableroute-backend;