Category: security / backend
Project area: backend/src/services/db.ts, backend/src/index.ts
Implementation:
- Audit all DB queries for parameterized usage.
- Replace any string interpolation.
- Add SQLi test cases.
Acceptance Criteria:
- Zero raw string interpolation in queries.
- SQLi payloads stored as plain text.
- Findings documented.
Category: security / backend
Project area: backend/src/services/db.ts, backend/src/index.ts
Implementation:
Acceptance Criteria: