Security Patches: IDOR and XSS Fixes - #213

Open

arpit000010 wants to merge 83 commits into

RECursion-NITD:testingfrom

arpit000010:arpit-security-patch

Commits on Dec 21, 2022

let's try.....
arin17bishwa
committed
0d53086
updated requirements
arin17bishwa
committed
82c3fd7
initial setup for django-prometheus
arin17bishwa
committed
8b98beb
added to models
arin17bishwa
committed
9722583

Commits on Dec 23, 2022

rebased after making events app live
arin17bishwa
committed
caf66a6
updated requirements
arin17bishwa
committed
e2cbbcc
initial setup for django-prometheus
arin17bishwa
committed
d9605f6
added to models
arin17bishwa
committed
554929c
final(hopefully) merge commit for rebasing
arin17bishwa
committed
85a9a65

Commits on Dec 26, 2022

modified behaviour of experience update.
arin17bishwa
committed
8e7633a
reformat
arin17bishwa
committed
b9f3856
added base API url events
arin17bishwa
committed
a424efc
fixed a misplaced ')'
arin17bishwa
committed
2978603

Commits on Dec 27, 2022

added get_absolute_url method
arin17bishwa
committed
956a917
created API code
arin17bishwa
committed
71b24db
added old mailing method(for future benchmarking)
arin17bishwa
committed
54c11f2
added base URL for Team API
arin17bishwa
committed
75cb8f8
added basic API for the team app
arin17bishwa
committed
3cab03c

Commits on Jan 2, 2023

Merge branch 'RECursion-NITD:testing' into trial_deployment
arin17bishwa
authored
0f2f354
added django-cors-headers and python-dateutil
arin17bishwa
committed
a4a2774
added django-cors-headers specific configuration
arin17bishwa
committed
63e152e

Commits on Jan 22, 2023

Commits on Feb 9, 2023

added postman API collection link
arin17bishwa
committed
b3d01dc

Commits on Feb 12, 2023

Merge branch 'RECursion-NITD:testing' into trial_deployment
arin17bishwa
authored
ef33c22

Commits on Jun 5, 2023

Merge branch 'RECursion-NITD:testing' into trial_deployment
arin17bishwa
authored
133992b

Commits on Aug 8, 2023

added django-rest-framework API
moinak878
authored
bf3a91c

Commits on Sep 28, 2023

added apis for content and subtopics
Sivam2313
committed
a0eb788

Commits on Sep 29, 2023

[added] API for getting started
moinak878
authored
bc5a746

Commits on Dec 4, 2023

api endpoints for google login
Sivam2313
committed
c540fe1
Merge branch 'dev-api' of https://github.com/Sivam2313/RECursionNITD-website into dev-api
Sivam2313
committed
13ba9e2
added api endpoints for google login
Sivam2313
committed
8b6895e

Commits on Dec 6, 2023

fixed api and route name
Sivam2313
committed
a9bf675
Merge branch 'RECursion-NITD:dev-api' into dev-api
Sivam2313
authored
c72ef9c

Commits on Dec 8, 2023

Merge pull request #190 from Sivam2313/dev-api
moinak878
authored
e455500

Commits on Mar 3, 2024

Commits on Mar 5, 2024

changes
Sivam2313
committed
429cc6d
Merge pull request #192 from Sivam2313/dev-api
moinak878
authored
5bdbd65

Commits on May 29, 2024

fix google login api
moinak878
authored
50a6530

Commits on Oct 27, 2024

Commits on Jan 9, 2025

deployment changes
apaul2077
committed
aa11ca4
changes
apaul2077
committed
d32babb

Commits on Oct 20, 2025

New requirements for 3.11 python added,
apaul2077
committed
4f08c83

Commits on Oct 21, 2025

Login fixed
apaul2077
committed
7df4515

Commits on Oct 27, 2025

changed footer content and fixed profile image problem
apaul2077
committed
6067caf

Commits on Nov 12, 2025

missing profile picture fixed
apaul2077
committed
cc4a96f

Commits on Nov 29, 2025

content filter and rate limiting
apaul2077
committed
9788dcc
Merge pull request #196 from apaul2077/dev-api
apaul2077
authored
7696f5f

Commits on Dec 11, 2025

Commits on Dec 21, 2025

Made a few backend changes to facilitate registration and user creation
AayushAnand39
committed
48f70d1

Commits on Dec 24, 2025

Password reset api fixed
ThunderEmperors
committed
1f3d8fb

Commits on Dec 25, 2025

Commits on Dec 28, 2025

Merge pull request #199 from ThunderEmperors/reset-api
apaul2077
authored
ea53ecc

Commits on Jan 6, 2026

made some changes to interview experience mailing
apaul2077
committed
4ee0fdf
deployment changes
apaul2077
committed
3c5766e

Commits on Jan 7, 2026

Merge pull request #201 from apaul2077/dev-api
apaul2077
authored
685ac78

Commits on Jan 9, 2026

fixed google login
apaul2077
committed
e57d532
Merge pull request #202 from apaul2077/dev-api
apaul2077
authored
e82af6d

Commits on Jan 18, 2026

Commits on Apr 12, 2026

Commits on Apr 14, 2026

Commits on Apr 17, 2026

Feat: Enhance Google OAuth integration with client ID validation and domain whitelisting
asishghos
committed
909bf7e

Commits on Apr 18, 2026

Merge pull request #207 from SuryaHalder/dev-api
apaul2077
authored
909c091

Commits on Apr 20, 2026

Commits on Apr 29, 2026

Update README with project setup and contribution instructions
Anindita
committed
5789e4c

Commits on May 2, 2026

Update README as per review suggestions
Anindita
committed
8bf9367
Update README: add Python 3.11 install instructions
Anindita
committed
49886d5

Commits on May 3, 2026

Merge pull request #209 from Anin129/docs/update-readme
apaul2077
authored
7ee60a4

Commits on May 4, 2026

fix: media duplicacy code issue resolved
Master-Bruce-Wayne
committed
2d988f9

Commits on May 5, 2026

Merge pull request #211 from Master-Bruce-Wayne/dev-api
apaul2077
authored
36d207a

Commits on Jul 9, 2026

Security patches: Fixed XSS via bleach sanitization and patched IDOR in Google Login
arpit000010
committed
290011e