feat: Implement Protocol State Snapshot & Rollback Framework (#227) - #232

Merged

rohan911438 merged 2 commits into

Stellar-Prex:mainfrom

Junman140:feature/state-snapshot-rollback

Jul 24, 2026

GitHub Advanced Security / CodeQL failed Jul 23, 2026 in 4s

6 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

3 high
2 medium

Other Alerts:

1 note

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 189 in backend/server.js

Code scanning / CodeQL

Missing CSRF middleware High

This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a

without CSRF protection.
This cookie middleware is serving a [r

Check failure on line 483 in backend/src/services/stateSnapshotService.js

Code scanning / CodeQL

Database query built from user-controlled sources High

This query object depends on a

.

Check failure on line 488 in backend/src/services/stateSnapshotService.js

Code scanning / CodeQL

Database query built from user-controlled sources High

This query object depends on a

.

Check warning on line 144 in backend/src/controllers/stateSnapshotController.js

Code scanning / CodeQL

Log injection Medium

Log entry depends on a

.

Check warning on line 188 in backend/src/controllers/stateSnapshotController.js

Code scanning / CodeQL

Log injection Medium

Log entry depends on a

.

Check notice on line 432 in backend/src/services/stateSnapshotService.js

Code scanning / CodeQL

Unused variable, import, function or class Note

Unused variable LiquidityPosition.