Database injection
Open
review
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
You shouldn't use the javascript methods when dealing with databases since this might and will lead to a serious security issues
https://github.com/GSG-G10/W7-ToDo/blob/9732c79189a00e005547aec1357720691b619383/server/database/queries/get_task_query.js#L4
Contributor guide
No contributing guide indexed for this repository
Research direction
Start at server/database/queries/get_task_query.js, especially line 4, and trace how the task query receives its inputs. Clarify the intended safe database behavior, then verify the affected query path with relevant database tests or a reproducible input that demonstrates the issue.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- databases, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100