Questions

Status
Security reviewCoding · Level 3Open topic
Invoice download endpoints for the billing pageEasyCode reviewStripe styleCode reviewStripe styleEasy10 minProfile update route for account settingsEasyCode reviewSalesforce styleCode reviewSalesforce styleEasy10 minIssue list endpoint in the tracker APIEasyCode reviewCode reviewEasy15 minPassword storage for the accounts serviceEasyCode reviewCoinbase styleCode reviewCoinbase styleEasy15 minSearch results page in the help centerEasyCode reviewGoogle styleCode reviewGoogle styleEasy15 minCoupon code lookup at checkoutEasyCode reviewCode reviewEasy10 minSMS login code sender for the mobile appEasyCode reviewCode reviewEasy10 minExpense approval route in the finance appEasyCode reviewCode reviewEasy10 minAttachment delete helper for the support portalEasyCode reviewCode reviewEasy10 minProfile bio rendering in the Flask appMediumCode reviewCode reviewMedium20 minToken check middleware for the API gatewayMediumCode reviewStripe styleCode reviewStripe styleMedium20 minService key check on the internal ledger APIMediumCode reviewStripe styleCode reviewStripe styleMedium20 min
Customer list export for account managersMediumCode reviewCode reviewMedium15 minMember card in the community directoryMediumCode reviewMeta styleCode reviewMeta styleMedium15 minEncryption of payout bank details at restMediumCode reviewCoinbase styleCode reviewCoinbase styleMedium20 minAudit history lookup in the admin consoleMediumCode reviewCode reviewMedium15 minSignature check on the payment webhookMediumCode reviewStripe styleCode reviewStripe styleMedium15 minSession role client-writableMediumCode reviewCode reviewMedium25 minQuery string unescapedMediumCode reviewCode reviewMedium16 minJWT secret hardcoded in fallbackMediumCode reviewCode reviewMedium18 minTransfer CSRF unprotectedMediumCode reviewCoinbase styleCode reviewCoinbase styleMedium18 minMongoDB query accepts plaintext passwordMediumCode reviewCode reviewMedium18 minOverly permissive CORS with credentialsMediumCode reviewStripe styleCode reviewStripe styleMedium18 minTLS verification disabledMediumCode reviewStripe styleCode reviewStripe styleMedium22 minDownload handler for user data exportsMediumCode reviewCode reviewMedium20 minGift card issuing in the online shopMediumCode reviewCode reviewMedium15 minField encryption helper for customer tax recordsHardCode reviewCoinbase styleCode reviewCoinbase styleHard20 minParser for supplier invoices uploaded as XMLHardCode reviewCode reviewHard20 minDeep merge allows prototype pollutionHardCode reviewCode reviewHard30 minMarkdown sanitizer allows onclickHardCode reviewGoogle styleCode reviewGoogle styleHard22 minJWT kid header injectionHardCode reviewCoinbase styleCode reviewCoinbase styleHard24 minUser search by emailHardCode reviewCode reviewHard22 minJSONB key injected into SQLHardCode reviewCode reviewHard24 minGCM message encryptionHardCode reviewCoinbase styleCode reviewCoinbase styleHard26 minGit clone from user URLHardCode reviewMicrosoft styleCode reviewMicrosoft styleHard24 minHTML sanitizer output re-parsedHardCode reviewGoogle styleCode reviewGoogle styleHard22 minLogin accepts unlimited attemptsHardCode reviewCoinbase styleCode reviewCoinbase styleHard20 minAny authenticated user deletes accountsHardCode reviewSalesforce styleCode reviewSalesforce styleHard18 minTemplate string renders user inputHardCode reviewCode reviewHard22 minTiming attack in signature verificationHardCode reviewStripe styleCode reviewStripe styleHard25 minPrefix matching bypasses key validationHardCode reviewStripe styleCode reviewStripe styleHard22 minRelease workflow on pull_request_targetHardCode reviewGoogle styleCode reviewGoogle styleHard20 min