unc-csxl / csxl.unc.edu

CS Experience Labs' web application.
https://csxl.unc.edu
MIT License
10 stars 11 forks source link

Fix Critical Issue - Applications Data Leaking with Section Data #464

Closed ajaygandecha closed 4 months ago

ajaygandecha commented 4 months ago

This pull request removes the preferred_applicants field from the backend section model. This field leaks users' application data via the public GET section data API. In addition, this data caused pages relying on sections data to load extremely slowly.

After further analysis, it does not appear that this extra field had any functionality in the backend, so I think it can be safely removed.