Security Improvements To PB Website And Repo

pbdsce / pbwebsite

Rebuild of the pb website using Nextjs and Tailwind

MIT License

0 stars 11 forks source link

Open SkySingh04 opened 1 month ago

SkySingh04 commented 1 month ago

Put validation Checks in the API and the frontend code
Make sure the recaptcha, works properly so there will be a rate limit mechanism
one email address can register once only
implement CSRF token for all API endpoint
Remove those API that prints out the entire db, if it is an admin functionality then put the nesscary auth mechanism there

SkySingh04 commented 4 hours ago

We also need to update the firebase rules to enable read/write only for authenticated users