mystamps

mystamps copied to clipboard

The puzzle `1356-cbf177f8` from #1356 has to be resolved: https://github.com/php-coder/mystamps/blob/01dca27e62e30b93b5c35f0c7d8d1fee0c705658/src/main/webapp/WEB-INF/views/series/info.html#L174-L174 The puzzle was created by Slava Semushin on 04-May-20.

0pdd

The puzzle `1154-b99af137` from #1154 has to be resolved: https://github.com/php-coder/mystamps/blob/adfb6ef571b9dfc9bd3adafb0b4156a0af7f5073/src/main/resources/application-travis.properties#L2-L2 Tech debt for: adfb6ef571b9dfc9bd3adafb0b4156a0af7f5073 (#1154)

github-actions[bot]

- [x] CheckStyle - [x] remove `CheckStyle: ignore` and `@SuppressWarnings("checkstyle:*")` comments - [x] #260 - [x] #1015 - [x] PMD - [x] remove `@SuppressWarnings("PMD.*")` comments - [x] #195 - [x]...

php-coder

The puzzle `1621-71a788b3` from #1621 has to be resolved: https://github.com/php-coder/mystamps/blob/91721848e66dcb0c327a7cb710f63fd31cd00e72/src/main/config/spotbugs-filter.xml#L287-L287 Tech debt for: 91721848e66dcb0c327a7cb710f63fd31cd00e72 (#1621)

github-actions[bot]

Replace Date class usage

6

We should use new datetime API from Java8 instead (`LocalDateTime`). Depends on: - [ ] #930 - [ ] #931 - [ ] #933 - [ ] #1032 - [...

php-coder

Integrate nohttp

2

We need to update the sources use https where possible and activate additional check for CheckStyle for that. Details: - https://spring.io/blog/2019/06/10/announcing-nohttp - https://github.com/spring-io/nohttp - https://github.com/spring-io/nohttp/tree/master/nohttp-checkstyle I also have a draft...

php-coder

We should cover all 4 cases. Tech debt for: 27794314f13572da7a59f418befeab1d32003b01 (#519)

php-coder

To prevent possible errors during refactorings like we're doing in #455 it would be good to have tests that will checks that all resources that we serve are available (have...

php-coder

Add integration tests for checking that secured resources can't be accessed with modified URL

2

After applying fix against CVE-2016-5007 (see 10a7f23efb1a5c8307154ec0d9818fb0102c4ddf) we also should add integration tests to ensure that, for example, unauthorized user can't access `/series/add` by changing URL to `/series/add/` or `/series/add.html`

php-coder

Add integration tests for checking that forms has field with CSRF token

1

All forms that `POST`ing data must have field with CSRF token.

php-coder