search

fac19 / week11-where-is-whippy

An ice cream truck finder to connect local ice cream vendors with customers
https://where-is-whippy.netlify.app
1 stars 3 forks source link

Security #82

Open Roger-Heathcote opened 4 years ago

Roger-Heathcote commented 4 years ago

At least one route (http://localhost:8080/vendors/1) reveals privileged information. Even after you implement authorisation it is still unadvisable to return a users password.

Joepock123 commented 4 years ago

Ye thanks for pointing that out Roger! Something we didn't quite get around to fixing but very important