Nicolas Harraudeau

Missing anchors in validation regular expression

1

Hi, The ReDos example uses two regular expressions which are missing start and end anchors: https://github.com/OWASP/NodeGoat/blob/e2dffdb8c7e988c10bacdccba14d6f0d352c5090/app/routes/profile.js#L58-L59 These regular expressions accept values such as `evil123#evil`. How about: 1/ fixing these two...

Hi, I noticed that commit https://github.com/OWASP/NodeGoat/commit/7c293e721bd1e95be6f82475d295b9b10e3b584e has broken the XSS example. 1/ The `website` property is not saved in the database. Thus it will never be displayed. https://github.com/OWASP/NodeGoat/blob/e2dffdb8c7e988c10bacdccba14d6f0d352c5090/app/routes/profile.js#L82-L91 2/ The...

Release new version

2

Would it be possible to release a new version? I need to use typeahead 0.11.1 which is only compatible with master branch (commit 324628d5c2dffe347091d097efbaaaab79ceeddc). Thank you for your work.

API: Record metadata migration from one schema version to another.

1

**Problem:** New community schemas can create complex migration when a field is deprecated (forbidden) or even replaced by other fields. B2SHARE needs a mechanism enabling users to migrate a record...

Hello, I report this issue here as I don't see a repository for the generic editor. I apologize if this is not the right place. Editor version: 1.243.0 Editor source:...

**Problem:** I am now refactoring `invenio-pidrelations` to make it more intuitive. I will remove [`Ordered` and `Unordered` relations from the config variable `PIDRELATIONS_RELATION_TYPES`](https://github.com/inveniosoftware/invenio-pidrelations/blob/d951eb816fd154ec5d6588f9b711fb4f6439c3ec/invenio_pidrelations/config.py#L33-L38) as they shouldn't be used like that....

**Problems:** When a record version is deleted the UI does not update correctly: - [ ] If the last version is deleted the previous version still warn that it is...

**Problem:** When a user is super admin (he/she has the `superuser-access` permission), the UI does not show the "edit metadata" button despite the fact that the user can edit the...

**Problem:** Deleting a record or a Deposit also deletes the bucket and the ObjectVersion, but the FileInstance is still kept and the actual file is not deleted from the file-system....