blocksoapp / blocksoapp/monorepo
Uploading profile pic to IPFS should happen on backend
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
**Current Behavior**
User can upload their own profile pic.
It is uploaded to IPFS using the frontend.
**Expected Behavior**
User can upload their own profile pic.
The image is sent to the backend and uploaded to IPFS from there.
Having the nft storage key on the frontend is a security risk.
A malicious actor can rekt us.
Contributor guide
No contributing guide indexed for this repository
Research direction
Trace the existing profile-picture upload flow from the frontend to identify where the image is sent and where the NFT.Storage key is used. Move the IPFS upload to the backend, keep the frontend responsible for submitting the image, and verify that the key is no longer exposed in frontend code.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- backend, frontend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100