From 460f07298e79675f49cf453060aba349c479cfb3 Mon Sep 17 00:00:00 2001 From: Uyoxy Date: Wed, 29 Jul 2026 14:07:07 +0000 Subject: [PATCH] backend validation error --- CHANGELOG.md | 3 ++- CONTRIBUTING.md | 6 ++++-- IMPLEMENTATION_VERIFICATION.md | 3 ++- SECURITY.md | 3 ++- backend/README.md | 3 ++- backend/RELIABILITY.md | 3 ++- frontend/DOCKER.md | 3 ++- frontend/Dockerfile | 3 ++- frontend/README.md | 3 ++- frontend/RELIABILITY.md | 3 ++- 10 files changed, 22 insertions(+), 11 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index de1e6a2f..201f452c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,7 +7,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), This fix addresses GitHub Issue #292 (Security: Cross-Site Scripting (XSS) in Split Description Field) by implementing comprehensive XSS prevention across the entire application using a 3-layer defense strategy. --> ## [Unreleased] - + ### Security - **CRITICAL FIX:** XSS (Cross-Site Scripting) vulnerability eliminated in project title, type, and collaborator alias fields (closes #292) - Implemented server-side character whitelist validation on all user input fields diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 55d31cae..8cd842b9 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -1,8 +1,10 @@ # 🤝 Contributing to SplitNaira Thank you for your interest in contributing to **SplitNaira** — a royalty distribution platform built for Nigeria's creative economy on Stellar. Every contribution, big or small, helps us build a fairer system for artists, filmmakers, and creators across Nigeria. - ---- + +--- --- --> diff --git a/IMPLEMENTATION_VERIFICATION.md b/IMPLEMENTATION_VERIFICATION.md index b80bf90e..2e928f0f 100644 --- a/IMPLEMENTATION_VERIFICATION.md +++ b/IMPLEMENTATION_VERIFICATION.md @@ -3,7 +3,8 @@ ## Date: June 1, 2026 - + --- // Simple healthcheck script for deployment readiness verification ## Executive Summary diff --git a/SECURITY.md b/SECURITY.md index 9619da88..cbe81ccb 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,7 +4,8 @@ ## Supported Versions - + | Version | Supported | |---------|-----------| | `main` branch | Yes | diff --git a/backend/README.md b/backend/README.md index 3b360e3c..253839ec 100644 --- a/backend/README.md +++ b/backend/README.md @@ -1,7 +1,8 @@ # SplitNaira Backend Express + TypeScript API scaffold for SplitNaira. - + ## Scripts - `npm ci` - `npm run dev` diff --git a/backend/RELIABILITY.md b/backend/RELIABILITY.md index 5cdd76ca..ca3ba9f7 100644 --- a/backend/RELIABILITY.md +++ b/backend/RELIABILITY.md @@ -1,5 +1,6 @@ ## Reliability Improvements (Wave 5) - + ### Changes - Added `requestTimeout` middleware to return 503 on slow requests - Added unit tests for timeout middleware diff --git a/frontend/DOCKER.md b/frontend/DOCKER.md index a1d5fae9..44bd9f3f 100644 --- a/frontend/DOCKER.md +++ b/frontend/DOCKER.md @@ -11,7 +11,8 @@ docker build -t splitnaira-frontend . # Or from the project root docker build -t splitnaira-frontend -f frontend/Dockerfile frontend/ ``` - + ## Running the Container ### Basic Run diff --git a/frontend/Dockerfile b/frontend/Dockerfile index 787b2709..91747648 100644 --- a/frontend/Dockerfile +++ b/frontend/Dockerfile @@ -6,7 +6,8 @@ FROM node:18-alpine AS deps RUN apk add --no-cache libc6-compat WORKDIR /app - + # Copy package files COPY package.json package-lock.json ./ diff --git a/frontend/README.md b/frontend/README.md index 68bc24f6..822da658 100644 --- a/frontend/README.md +++ b/frontend/README.md @@ -9,7 +9,8 @@ Next.js app scaffold for the SplitNaira web experience. - `npm run start` - `npm run test` - `npm run check:i18n` - fails if any locale's message keys don't match `en.json` - + ## Notes - Dependencies are pinned to exact versions in `package.json` and `package-lock.json`. - Always install with `npm ci` locally and in CI to guarantee the same dependency graph. diff --git a/frontend/RELIABILITY.md b/frontend/RELIABILITY.md index 78aafb6d..7790762e 100644 --- a/frontend/RELIABILITY.md +++ b/frontend/RELIABILITY.md @@ -3,7 +3,8 @@ This document outlines the architecture, standards, and runtime strategies implemented to guarantee production-grade observability and network-level resilience for the SplitNaira frontend. - + --- ## 1. Centralized Observability & Telemetry