Code reviewHardcr-g134

Subject Missing validationLevel Senior–Staff~25 minCommon in Security interviewsIndustries Software development

Question

Review this TypeScript profile-update handler.

What a strong answer looks like

Separate real bugs from style. Rank issues by severity, point at the root cause rather than the symptom, and suggest a concrete fix — specific and kind.

Learn the concepts

Talk through your review

Code to reviewts

1// PATCH /users/:id2router.patch('/users/:id', requireAuth, async (req, res) => {3  const updates = req.body;4  const user = await User.findByPk(req.params.id);5  if (!user) return res.status(404).json({ error: 'not found' });6 7  Object.assign(user, updates);8  await user.save();9 10  res.json(user);11});

Run or narrate your approach, then ask the coach.