riveto
https://github.com/nsanjayboruds/riveto
JavaScript
RIVETO is a full-stack web application built with separate frontend and backend modules. The frontend manages the user interface using modern web technologies (HTML, CSS, JavaScript). The backend handles server-side logic, APIs, and data management. Thi
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
JavaScript not yet supported1 Subscribers
Add a CodeTriage badge to riveto
Help out
- Issues
- [SECURITY] JWT secret committed as placeholder in .env.example - cloned deployments run with known secret
- [SECURITY] Missing X-Frame-Options header leaves application vulnerable to clickjacking attacks
- [SECURITY] User passwords hashed with MD5 or without proper salting - vulnerable to rainbow table attacks
- [SECURITY] Error handler middleware exposes full Express stack traces in JSON responses
- [FEATURE]: Add a coupon and discount code system with secure server-side validation
- [FEATURE]: Add CSRF protection for cookie-based authentication using the double-submit cookie pattern
- [Bug]: `isAuth` reads `decoded.userId` while JWTs are signed with `{ id }`, causing authenticated routes to fail
- [Security] login/OTP/googleLogin return bcrypt password hash + reset token in JSON response
- [Security] placeOrder trusts client-supplied amount + items — server never recomputes from product catalog
- Bug: OTP input missing label and aria-label -- inaccessible to screen readers
- Docs
- JavaScript not yet supported