Skip to content

fix: add input validation for proposals and users - #11607

Open
laurentketterle-hub wants to merge 1 commit into
SecureBananaLabs:mainfrom
laurentketterle-hub:fix/input-validation-proposals-users
Open

fix: add input validation for proposals and users#11607
laurentketterle-hub wants to merge 1 commit into
SecureBananaLabs:mainfrom
laurentketterle-hub:fix/input-validation-proposals-users

Conversation

@laurentketterle-hub

Copy link
Copy Markdown

Fixes #11606

  • Add validators/proposal.js
  • Add validators/user.js
  • Add validation to proposal and user controllers
  • Add authMiddleware to GET /api/users

/bounty $800

…users

- Create validators/proposal.js with Zod schema
- Create validators/user.js with Zod schema
- Add createProposalSchema.parse() to postProposal controller
- Add createUserSchema.parse() to postUser controller
- Add authMiddleware to GET /api/users route

Fixes SecureBananaLabs#11606
github-actions Bot added a commit that referenced this pull request Aug 3, 2026
@laurentketterle-hub

Copy link
Copy Markdown
Author

I claim this bounty. PR ready for review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SECURITY: POST /api/payments has no auth — unauthenticated payment creation

1 participant