Christian Hood
481b5a536b
- Install and configure helmet with basic CSP in app.js - Restrict CORS to ALLOWED_ORIGIN env var (default localhost:5173) - Add express.json 1mb body size limit to prevent memory exhaustion - Add parseInt+isNaN validation for all :id route params in bills.js and financing.js (GET/PUT/DELETE/:id and PATCH financing-payments/:id) - Extend bills.routes.test.js and financing.routes.test.js with ID validation tests (non-numeric IDs → HTTP 400) Nightshift-Task: security-footgun Nightshift-Ref: https://github.com/marcus/nightshift Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
24 lines
465 B
JSON
24 lines
465 B
JSON
{
|
|
"name": "budget-server",
|
|
"version": "1.0.0",
|
|
"main": "src/index.js",
|
|
"scripts": {
|
|
"start": "node src/index.js",
|
|
"dev": "nodemon src/index.js",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest"
|
|
},
|
|
"dependencies": {
|
|
"cors": "^2.8.5",
|
|
"dotenv": "^16.4.5",
|
|
"express": "^4.19.2",
|
|
"helmet": "^8.1.0",
|
|
"pg": "^8.11.5"
|
|
},
|
|
"devDependencies": {
|
|
"nodemon": "^3.1.0",
|
|
"supertest": "^7.2.2",
|
|
"vitest": "^4.1.0"
|
|
}
|
|
}
|