Manishkr1007 / WordWeaver

https://word-weaver-rho.vercel.app
MIT License
9 stars 33 forks source link

Bug Fix(Password and Account Details Are Exposed In Terminal While Sign Up ) #102

Open PRASHANTSWAROOP001 opened 2 days ago

PRASHANTSWAROOP001 commented 2 days ago

Issue: Sign-Up Form Data Exposure & 404 Error on "WordWeaver" Link

Description:

  1. Sign-Up Form Data Exposed in Browser Console:

    • While creating a new account (sign-up), the data entered into the form is visible in the browser console. This is a significant security vulnerability because it exposes sensitive user data (such as email, password, etc.) to anyone with access to the browser's developer tools. This issue could lead to potential data breaches and violates standard security practices like keeping user data confidential.
  2. 404 Error on "WordWeaver" Link:

    • Upon clicking the link labeled "WordWeaver" (without the icon) in the website's navigation menu, the user is routed to a 404 Error page. This could negatively affect the user experience and create confusion when users expect to be redirected to a relevant page.

Proposed Fix:

  1. Fixing Data Exposure in Console:

    • Implement backend form handling to ensure no form data is logged to the console. Validate and securely transmit data to the server without exposing sensitive information on the client side.
  2. Fixing the 404 Error on "WordWeaver" Link:

    • Correct the routing for the "WordWeaver" link, ensuring that it navigates to the appropriate page without resulting in a 404 error.

Why This Matters:

Contributing as a GSSoC & Hacktoberfest Contributor:

I am a contributor for GSSoC Extended and Hacktoberfest, and I would like to work on these issues. Kindly assign this issue to me under the following labels:

Thank you for the opportunity to contribute! I look forward to improving the security and functionality of the website.

Additional Info:

Labels:

https://github.com/user-attachments/assets/5497ac77-6372-4b61-954b-7a295b1de1d8

https://github.com/user-attachments/assets/3a8d1714-69fb-4668-b634-17ea08b87a76

coder-pink commented 2 days ago

@PRASHANTSWAROOP001 Hi, Can you assign this to me?

Manashgoswamii commented 19 hours ago

Can you assign it to me?