redefined-designs

9 Commits

Include renames

Author	SHA1	Message	Date
bermudalamb	9ab689e624	feat: add customer cart with expiry, shipping addresses with USPS validation, and multi-item PayPal checkout SonarQube Analysis / sonarqube (pull_request) Failing after 59s Details Tests / backend-unit (pull_request) Successful in 34s Details Tests / backend-integration (pull_request) Failing after 1m33s Details Tests / frontend-e2e (pull_request) Failing after 1m5s Details	2026-08-14 14:02:25 -05:00
bermudalamb	845b1f29b9	fix: Dockerfile SonarQube Analysis / sonarqube (pull_request) Successful in 3m3s Details Tests / backend-unit (pull_request) Successful in 2m0s Details Tests / backend-integration (pull_request) Successful in 1m50s Details Tests / frontend-e2e (pull_request) Failing after 1m0s Details	2026-08-14 10:58:07 -05:00
bermudalamb	7f4479605a	chore: replace manual SQL migrations with node-pg-migrate SonarQube Analysis / sonarqube (pull_request) Successful in 2m42s Details Tests / backend-unit (pull_request) Successful in 34s Details Tests / backend-integration (pull_request) Successful in 50s Details Tests / frontend-e2e (pull_request) Failing after 38s Details	2026-08-14 10:05:09 -05:00
bermudalambandClaude Opus 5	aba47c81e3	fix: bound admin image uploads and use a CSPRNG for stored filenames SonarQube Analysis / sonarqube (pull_request) Successful in 3m49s Details Tests / backend-unit (pull_request) Successful in 33s Details Tests / backend-integration (pull_request) Successful in 1m6s Details Tests / frontend-e2e (pull_request) Failing after 1m7s Details SonarQube flagged three hotspots in the admin router: multer was configured with no content length limits, and stored filenames were derived from Date.now() plus Math.random(). - Cap the multipart body on every dimension: 6 files, 8 MiB per image, 8 fields, 64 KiB per field. Without limits a single request could fill the uploads volume. - Generate stored filenames with crypto.randomUUID() so paths are not predictable. Image ordering is unaffected; sort_order already drives it. - Wrap the upload middleware to translate MulterError into 413/400 JSON. The app mounts no error handler, so a limit rejection would otherwise surface as an HTML 500. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-14 09:22:45 -05:00
bermudalamb	81118245ce	fix: sonarqube denial of service issue	2026-08-14 08:43:37 -05:00
bermudalamb	4b524e0da3	fix: move scripts folder to correct location SonarQube Analysis / sonarqube (pull_request) Successful in 4m31s Details Tests / backend-unit (pull_request) Successful in 59s Details Tests / backend-integration (pull_request) Failing after 4s Details Tests / frontend-e2e (pull_request) Failing after 1s Details	2026-08-14 08:15:52 -05:00
bermudalamb	234330e482	Add CI test workflow with job summaries SonarQube Analysis / sonarqube (push) Successful in 3m55s Details Tests / backend-unit (push) Failing after 55s Details Tests / backend-integration (push) Failing after 2s Details Tests / frontend-e2e (push) Failing after 1s Details	2026-08-13 19:10:30 -05:00
bermudalamb	921022c658	Add backend unit/integration tests, Playwright e2e tests, README, cookie Secure fix SonarQube Analysis / sonarqube (push) Successful in 4m20s Details	2026-08-13 22:35:38 +00:00
bermudalamb	9be4986dd3	Initial commit: redefined-designs storefront	2026-08-13 21:07:54 +00:00