Skip to content

Commit 9c59747

Browse files
committed
Implement fix for security flaw 1
1 parent 9b39d3b commit 9c59747

File tree

3 files changed

+151
-9
lines changed

3 files changed

+151
-9
lines changed

backend/package-lock.json

Lines changed: 140 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

backend/package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,15 @@
77
"test": "echo \"Error: no test specified\" && exit 1",
88
"ts-node": "ts-node",
99
"tsc": "tsc",
10-
"dev": "ts-node-dev src/index.ts"
10+
"prod": "cross-env NODE_ENV=production ts-node src/index.ts",
11+
"dev": "cross-env NODE_ENV=development ts-node-dev src/index.ts"
1112
},
1213
"author": "",
1314
"license": "ISC",
1415
"devDependencies": {
1516
"@types/cors": "^2.8.12",
1617
"@types/express": "^4.17.14",
18+
"cross-env": "^7.0.3",
1719
"ts-node": "^10.9.1",
1820
"ts-node-dev": "^2.0.0",
1921
"typescript": "^4.9.3"

backend/src/routes/user.ts

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
1-
import express from "express";
2-
import { getUsers } from "../services/userService";
1+
import express from "express"
2+
import { getUsers } from "../services/userService"
33

44
const userRouter = express.Router()
55

6-
//TODO: TEST USE ONLY, DONT PUT IN PRODUCTION!!!!!!
7-
userRouter.get('/', (_request, response) => {
8-
const users = getUsers()
9-
return response.json(users)
10-
})
11-
6+
//if (process.env.NODE_ENV === "development" || process.env.NODE_ENV === "test") {
7+
userRouter.get("/", (_request, response) => {
8+
const users = getUsers()
9+
return response.json(users)
10+
})
11+
//}
1212
export { userRouter }

0 commit comments

Comments
 (0)