Skip to content

Conversation

Ayaan286
Copy link

@Ayaan286 Ayaan286 commented Jun 18, 2025

Summary of Issues Fixed in samples-typescript:
✅ Critical Security Issues Fixed:
SQL Injection Vulnerabilities in ts-nhost/src/controllers/todoController.ts:
Fixed string interpolation in GraphQL mutations
Replaced with proper GraphQL variables
Added input validation for all parameters
SQL Injection Vulnerabilities in ts-nhost/src/controllers/userController.ts:
Fixed string interpolation in deleteUser mutation
Added comprehensive input validation
Improved data sanitization
Missing Database Connection in express-mongodb/server.js:
Added MongoDB connection call
Ensured database is connected on server start
✅ Dependency Issues Fixed:
Missing Type Definitions in ts-nhost/package.json:
Added @types/dotenv for proper TypeScript support
All other type definitions were already present
Improved CORS Configuration in node-jwt/app.js:
Added environment variable support for CORS origin
Added credentials and optionsSuccessStatus for better security

Signed-off-by: Ayaan286 <[email protected]>
@Ayaan286 Ayaan286 force-pushed the ayaan-fellow-branch branch from 42f42f7 to 6b54934 Compare June 18, 2025 20:36
@pratik-mahalle
Copy link

Hey @Ayaan286, Thank you for raising the pr! Unfortunately we can`t merge this pr. As this was the part of API fellowship assignment, we are really proud of your work. Looking to see your more contribution in future

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants