Skip to content

https://bito.atlassian.net/browse/BITO-11263 - Summary and changelist PROD test

Amruta Hulagar requested to merge test-3 into repo_config

This is a test Test functional validation https://bito.atlassian.net/browse/BITO-11261

Summary by Bito

This PR introduces security best practices and fixes vulnerabilities in sample applications across Python, Java, and Go, demonstrating proper handling of SQL injection, command injection, weak hashing, insecure file uploads, and information disclosure. The changes add test files showcasing both vulnerable patterns and their secure implementations to serve as educational examples.

Detailed Changes
  • Introduces parameterized SQL queries in sample.py, src/main/sample.java, and user.go to prevent SQL injection vulnerabilities.
  • Adds bcrypt password hashing in sample.py and user.go for secure password storage, replacing weak MD5 hashing.
  • Implements input validation and safe command execution in sample.py, src/main/sample.java, and user.go to mitigate command injection risks.
  • Adds file type validation and path traversal prevention in sample.py and user.go for secure file uploads.
  • Filters sensitive configuration information in sample.py and user.go to prevent information disclosure.
Edited by Amruta Hulagar

Merge request reports