gray-mueller / gray-mueller/salon-solution-system-backend

Acceptance of Spaces in Rider Username in Enatega Multivendor Admin

Open Beginner friendly
#253 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Describe the bug
A security vulnerability has been identified in the Enatega Multivendor Admin, specifically in the rider section. The system is currently accepting spaces in the rider username, which poses a potential security risk. Usernames with spaces may lead to confusion, and it is recommended to disallow spaces in usernames for security reasons.

To Reproduce
Steps to reproduce the behavior:

Log in to the Enatega Multivendor Admin.
Navigate to the "Rider" section.
Attempt to create or edit a rider profile with a username containing spaces.
Observe that the system accepts the username with spaces without generating an error.
Expected behavior
Usernames for riders should not allow spaces to ensure clarity and security. The system should reject the input and provide an appropriate error message when attempting to use a username with spaces.

Screenshots
image

Desktop:

Browser: chrome

Contributor guide

Open the contributing guide

Research direction

Start at the rider create and edit entry points used from the Enatega Multivendor Admin's Rider section, and trace how the username is validated. Reproduce the issue with a username containing spaces, then verify that the input is rejected with an appropriate error message.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
backend, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.