fix(security): comprehensive auth and config hardening from audit - #189
fix(security): comprehensive auth and config hardening from audit#189BillyOutlast wants to merge 230 commits into
Quality Gate failed
Failed conditions
Annotations
Check warning on line 72 in server/server/api/v1/auth/signin/simple.post.ts
sonarqubecloud / SonarCloud Code Analysis
'credentials?.at(1)' may use Object's default stringification format ('[object Object]') when stringified.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9g-vl4caSOBezgK&open=AZ-nH9g-vl4caSOBezgK&pullRequest=189
Check warning on line 39 in sites/promo/src/components/text.tsx
sonarqubecloud / SonarCloud Code Analysis
Mark the props of the component as read-only.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9lZvl4caSOBezgO&open=AZ-nH9lZvl4caSOBezgO&pullRequest=189
Check warning on line 34 in sites/promo/src/components/button.tsx
sonarqubecloud / SonarCloud Code Analysis
Compare with `undefined` directly instead of using `typeof`.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9mZvl4caSOBezgQ&open=AZ-nH9mZvl4caSOBezgQ&pullRequest=189
Check warning on line 33 in server/composables/request.ts
sonarqubecloud / SonarCloud Code Analysis
'rawRequest' may use Object's default stringification format ('[object Object]') when stringified.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9j_vl4caSOBezgN&open=AZ-nH9j_vl4caSOBezgN&pullRequest=189
Check warning on line 148 in scripts/check-new-vulns.cjs
sonarqubecloud / SonarCloud Code Analysis
Prefer using an optional chain expression instead, as it's more concise and easier to read.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9nIvl4caSOBezgT&open=AZ-nH9nIvl4caSOBezgT&pullRequest=189
Check warning on line 24 in server/server/api/v1/auth/oidc/callback.get.ts
sonarqubecloud / SonarCloud Code Analysis
'query.code' may use Object's default stringification format ('[object Object]') when stringified.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9jBvl4caSOBezgL&open=AZ-nH9jBvl4caSOBezgL&pullRequest=189
Check warning on line 110 in scripts/check-new-vulns.cjs
sonarqubecloud / SonarCloud Code Analysis
Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9nIvl4caSOBezgR&open=AZ-nH9nIvl4caSOBezgR&pullRequest=189
Check warning on line 118 in scripts/check-new-vulns.cjs
sonarqubecloud / SonarCloud Code Analysis
Handle this exception or don't catch it at all.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9nIvl4caSOBezgS&open=AZ-nH9nIvl4caSOBezgS&pullRequest=189
Check warning on line 31 in server/server/api/v1/auth/oidc/callback.get.ts
sonarqubecloud / SonarCloud Code Analysis
'query.state' may use Object's default stringification format ('[object Object]') when stringified.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9jBvl4caSOBezgM&open=AZ-nH9jBvl4caSOBezgM&pullRequest=189
Check warning on line 3 in sites/promo/src/components/gradient.tsx
sonarqubecloud / SonarCloud Code Analysis
Mark the props of the component as read-only.
See more on https://sonarcloud.io/project/issues?id=BillyOutlast_drop&issues=AZ-nH9l3vl4caSOBezgP&open=AZ-nH9l3vl4caSOBezgP&pullRequest=189