Skip to content

[PROD] - Security, clean up & bug fixes #1368

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kkartunov merged 46 commits into from
Dec 12, 2025
Merged

[PROD] - Security, clean up & bug fixes #1368

Show file tree
Hide file tree
Changes from 45 commits
Commits
Show all changes
46 commits
Select commit Hold shift + click to select a range
5ce15aa
Cleanup old code for the review scorecard ui
vas3a Dec 4, 2025
3b1193a
fix: allow only admins and reviewer to respond to appeals
hentrymartin Dec 5, 2025
0361d8c
fix: lint
hentrymartin Dec 5, 2025
985e16a
Merge pull request #1361 from topcoder-platform/pm-3141
hentrymartin Dec 8, 2025
1468bd4
fix: filter submissions to design challenges if its configured that way
hentrymartin Dec 8, 2025
57b48d3
fix: can view submissions
hentrymartin Dec 8, 2025
6528746
fix: lint
hentrymartin Dec 8, 2025
d37b511
fix: lint
hentrymartin Dec 8, 2025
195226c
fix: lint
hentrymartin Dec 8, 2025
d088964
Merge pull request #1364 from topcoder-platform/pm-2662_1
hentrymartin Dec 8, 2025
951de7d
Merge pull request #1359 from topcoder-platform/cleanup-old-review-sc…
kkartunov Dec 9, 2025
c3baec0
point tc deps to master & npm minor update
kkartunov Dec 9, 2025
65eec2d
ci: deploy to dev env
kkartunov Dec 9, 2025
d6462df
back to auth-lib-v2
kkartunov Dec 9, 2025
da81018
fix: directly open scorecard in edit mode
hentrymartin Dec 10, 2025
5a25ed2
fix: revalidate appeals and response
hentrymartin Dec 10, 2025
d216fde
fix: revalidate appeals and response
hentrymartin Dec 10, 2025
b111246
fix: lint
hentrymartin Dec 10, 2025
548b0c4
fix: lint
hentrymartin Dec 10, 2025
7fd1d25
fix: restrict reviews in review tab for design challenge with config …
hentrymartin Dec 11, 2025
b6ed3ed
fix: lint
hentrymartin Dec 11, 2025
995d81e
fix: lint
hentrymartin Dec 11, 2025
75664d7
update yarn.lock
kkartunov Dec 11, 2025
2e1fc7d
Merge pull request #1367 from topcoder-platform/pm-2662_2
kkartunov Dec 11, 2025
0563cf0
fix trivy alerts
kkartunov Dec 11, 2025
b8d39fa
Merge branch 'dev' into security
kkartunov Dec 11, 2025
48816c5
ci: remove from dev
kkartunov Dec 11, 2025
3db7d1a
Merge pull request #1365 from topcoder-platform/security
kkartunov Dec 11, 2025
61ad75b
security fixes - high
kkartunov Dec 11, 2025
e564eed
Merge pull request #1369 from topcoder-platform/security
kkartunov Dec 11, 2025
5b01f5f
drop ssl serts
kkartunov Dec 11, 2025
72028ad
Merge pull request #1370 from topcoder-platform/security
kkartunov Dec 11, 2025
1b0df87
Merge pull request #1366 from topcoder-platform/pm-3141_1
kkartunov Dec 11, 2025
21226f2
fix: repond to appeals
hentrymartin Dec 11, 2025
12c4c64
fix: repond to appeals
hentrymartin Dec 11, 2025
d0a5e6d
fix: respond to appeals
hentrymartin Dec 11, 2025
86b03c8
fix: lint
hentrymartin Dec 11, 2025
4eb2201
fix: show only my winning results
hentrymartin Dec 11, 2025
8fac84b
fix: lint
hentrymartin Dec 11, 2025
5163510
Merge pull request #1371 from topcoder-platform/pm-3141_3
hentrymartin Dec 11, 2025
1ced8a1
Merge pull request #1372 from topcoder-platform/pm-2662_3
hentrymartin Dec 11, 2025
e9d4976
fix: show only submissions with passed screening score
hentrymartin Dec 11, 2025
6ae3ec0
fix: lint
hentrymartin Dec 11, 2025
d1cf5c6
Tweak this path to address 401 errors in the service
jmgasper Dec 11, 2025
23a62d1
Merge pull request #1373 from topcoder-platform/pm-2573
hentrymartin Dec 11, 2025
9ed7544
Merge pull request #1375 from topcoder-platform/master
kkartunov Dec 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 1 addition & 8 deletions .circleci/config.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -226,14 +226,7 @@ workflows:
branches:
only:
- dev
- LVT-256
- CORE-635
- feat/review
- feat/system-admin
- feat/v6
- pm-2074_1
- feat/ai-workflows
- delete_user
- pm-3141_3

- deployQa:
context: org-global
Expand Down
263 changes: 133 additions & 130 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,204 +19,207 @@
"sb:build": "storybook build -o build/storybook"
},
"dependencies": {
"@datadog/browser-logs": "^4.21.2",
"@datadog/browser-logs": "^4.50.1",
"@hello-pangea/dnd": "^18.0.1",
"@heroicons/react": "^1.0.6",
"@hookform/resolvers": "^4.1.2",
"@hookform/resolvers": "^4.1.3",
"@popperjs/core": "^2.11.8",
"@sprig-technologies/sprig-browser": "^2.20.1",
"@storybook/addon-actions": "7.6.10",
"@storybook/react": "7.6.10",
"@stripe/react-stripe-js": "1.13.0",
"@stripe/stripe-js": "1.41.0",
"@tinymce/tinymce-react": "^6.2.1",
"@types/codemirror": "5.60.15",
"@sprig-technologies/sprig-browser": "^2.39.0",
"@storybook/addon-actions": "7.6.20",
"@storybook/react": "7.6.20",
"@stripe/react-stripe-js": "1.16.5",
"@stripe/stripe-js": "1.54.2",
"@tinymce/tinymce-react": "^6.3.0",
"@types/codemirror": "5.60.17",
"amazon-s3-uri": "^0.1.1",
"apexcharts": "^3.36.0",
"axios": "^1.12.0",
"apexcharts": "^3.54.1",
"axios": "^1.13.2",
"browser-cookies": "^1.2.0",
"city-timezones": "^1.2.1",
"classnames": "^2.3.2",
"city-timezones": "^1.3.2",
"classnames": "^2.5.1",
"contentful": "^9.3.7",
"country-calling-code": "0.0.3",
"crypto-js": "^4.2.0",
"customize-cra": "^1.0.0",
"date-fns": "^2.30.0",
"dompurify": "^2.5.4",
"draft-js": "^0.10.4",
"draft-js-export-html": "^1.2.0",
"draft-js-markdown-shortcuts-plugin": "^0.3.0",
"draft-js-plugins-editor": "^2.0.3",
"dompurify": "^2.5.8",
"draft-js": "^0.11.7",
"draft-js-export-html": "^1.4.1",
"draft-js-markdown-shortcuts-plugin": "^0.6.1",
"draft-js-plugins-editor": "^2.1.1",
"easymde": "2.20.0",
"express": "^4.21.2",
"express-fileupload": "^1.4.0",
"express": "^4.22.1",
"express-fileupload": "^1.5.2",
"express-interceptor": "^1.2.0",
"filestack-js": "^3.42.0",
"filestack-js": "^3.44.2",
"highcharts": "^10.3.3",
"highcharts-react-official": "^3.2.0",
"highlight.js": "^11.6.0",
"highcharts-react-official": "^3.2.3",
"highlight.js": "^11.11.1",
"html2canvas": "^1.4.1",
"lodash": "^4.17.21",
"markdown-it": "^13.0.2",
"marked": "4.1.1",
"moment": "^2.29.4",
"marked": "4.3.0",
"moment": "^2.30.1",
"moment-duration-format": "^2.3.2",
"moment-timezone": "^0.5.37",
"moment-timezone": "^0.6.0",
"money": "^0.2.0",
"prop-types": "^15.8.1",
"qrcode.react": "^3.1.0",
"qs": "^6.11.0",
"qrcode.react": "^3.2.0",
"qs": "^6.14.0",
"rc-checkbox": "^2.3.2",
"react": "^18.2.0",
"react-apexcharts": "^1.4.0",
"react-color": "^2.13.8",
"react-contenteditable": "^3.3.6",
"react-css-super-themr": "^2.2.0",
"react-datepicker": "^4.14.1",
"react-dom": "^18.2.0",
"react-dropzone": "^11.3.2",
"react": "^18.3.1",
"react-apexcharts": "^1.9.0",
"react-color": "^2.19.3",
"react-contenteditable": "^3.3.7",
"react-css-super-themr": "^2.3.0",
"react-datepicker": "^4.25.0",
"react-dom": "^18.3.1",
"react-dropzone": "^11.7.1",
"react-elastic-carousel": "^0.11.5",
"react-gtm-module": "^2.0.11",
"react-helmet": "^6.1.0",
"react-hook-form": "^7.54.2",
"react-markdown": "8.0.6",
"react-hook-form": "^7.68.0",
"react-markdown": "8.0.7",
"react-otp-input": "^3.1.1",
"react-popper": "^2.3.0",
"react-redux": "^8.0.4",
"react-redux-toastr": "^7.6.10",
"react-responsive": "^9.0.0-beta.5",
"react-responsive-modal": "^6.2.0",
"react-router-dom": "^6.4.2",
"react-redux": "^8.1.3",
"react-redux-toastr": "^7.6.13",
"react-responsive": "^9.0.2",
"react-responsive-modal": "^6.4.2",
"react-router-dom": "^6.30.2",
"react-scripts": "5.0.1",
"react-select": "^5.8.0",
"react-spinners": "^0.13.6",
"react-toastify": "^9.0.8",
"react-tooltip": "5.11.1",
"redux": "^4.2.0",
"react-select": "^5.10.2",
"react-spinners": "^0.17.0",
"react-toastify": "^9.1.3",
"react-tooltip": "5.30.0",
"redux": "^4.2.1",
"redux-actions": "^2.6.5",
"redux-logger": "^3.0.6",
"redux-promise": "^0.6.0",
"redux-promise-middleware": "^6.1.3",
"redux-thunk": "^2.4.1",
"redux-promise-middleware": "^6.2.0",
"redux-thunk": "^2.4.2",
"rehype-raw": "^7.0.0",
"rehype-stringify": "^10.0.1",
"remark-breaks": "^3.0.2",
"remark-breaks": "^3.0.3",
"remark-frontmatter": "^4.0.1",
"remark-gfm": "^3.0.1",
"remark-parse": "^11.0.0",
"remove": "^0.1.5",
"sanitize-html": "^2.12.1",
"sass": "^1.79.0",
"styled-components": "^5.3.6",
"sanitize-html": "^2.17.0",
"sass": "^1.95.0",
"styled-components": "^5.3.11",
"swr": "^1.3.0",
"tc-auth-lib": "topcoder-platform/tc-auth-lib#v2.0",
"tinymce": "^7.9.1",
"typescript": "^4.8.4",
"universal-navigation": "https://github.com/topcoder-platform/universal-navigation#9fc50d938be7182",
"typescript": "^4.9.5",
"universal-navigation": "https://github.com/topcoder-platform/universal-navigation#master",
"uuid": "^11.1.0",
"yup": "^1.6.1"
"yup": "^1.7.1"
},
"devDependencies": {
"@babel/core": "^7.19.3",
"@babel/plugin-syntax-jsx": "^7.18.6",
"@babel/plugin-transform-runtime": "^7.19.1",
"@babel/preset-env": "^7.19.4",
"@babel/preset-react": "^7.18.6",
"@babel/preset-typescript": "^7.18.6",
"@babel/runtime": "^7.19.4",
"@babel/core": "^7.28.5",
"@babel/plugin-syntax-jsx": "^7.27.1",
"@babel/plugin-transform-runtime": "^7.28.5",
"@babel/preset-env": "^7.28.5",
"@babel/preset-react": "^7.28.5",
"@babel/preset-typescript": "^7.28.5",
"@babel/runtime": "^7.28.4",
"@craco/craco": "^7.1.0",
"@jackwilsdon/craco-use-babelrc": "1.0.0",
"@storybook/addon-essentials": "7.6.10",
"@storybook/addon-interactions": "7.6.10",
"@storybook/addon-links": "7.6.10",
"@storybook/blocks": "7.6.10",
"@storybook/preset-create-react-app": "7.6.10",
"@storybook/react-webpack5": "7.6.10",
"@storybook/testing-library": "^0.0.14-next.2",
"@testing-library/jest-dom": "^5.16.5",
"@storybook/addon-essentials": "7.6.20",
"@storybook/addon-interactions": "7.6.20",
"@storybook/addon-links": "7.6.20",
"@storybook/blocks": "7.6.20",
"@storybook/preset-create-react-app": "7.6.20",
"@storybook/react-webpack5": "7.6.20",
"@storybook/testing-library": "^0.2.2",
"@testing-library/jest-dom": "^5.17.0",
"@testing-library/react": "^13.4.0",
"@testing-library/user-event": "^14.4.3",
"@types/axios": "^0.14.0",
"@types/dompurify": "^2.3.4",
"@types/highlightjs": "^9.12.2",
"@types/jest": "^29.1.2",
"@types/lodash": "^4.14.186",
"@testing-library/user-event": "^14.6.1",
"@types/axios": "^0.14.4",
"@types/dompurify": "^2.4.0",
"@types/highlightjs": "^9.12.6",
"@types/jest": "^29.5.14",
"@types/lodash": "^4.17.21",
"@types/markdown-it": "^12.2.3",
"@types/marked": "4.0.7",
"@types/node": "^18.8.5",
"@types/reach__router": "^1.3.11",
"@types/react": "18.0.35",
"@types/react-datepicker": "^4.11.2",
"@types/react-dom": "^18.0.6",
"@types/react-gtm-module": "^2.0.1",
"@types/react-helmet": "^6.1.6",
"@types/react-redux-toastr": "^7.6.2",
"@types/marked": "4.3.2",
"@types/node": "^18.19.130",
"@types/reach__router": "^1.3.15",
"@types/react": "18.3.27",
"@types/react-datepicker": "^4.19.6",
"@types/react-dom": "^18.3.7",
"@types/react-gtm-module": "^2.0.4",
"@types/react-helmet": "^6.1.11",
"@types/react-redux-toastr": "^7.6.6",
"@types/react-router-dom": "^5.3.3",
"@types/redux-actions": "2.6.2",
"@types/redux-logger": "^3.0.9",
"@types/redux-promise": "^0.5.29",
"@types/sanitize-html": "^2.6.2",
"@types/systemjs": "^6.1.1",
"@types/testing-library__jest-dom": "^5.14.5",
"@types/redux-actions": "2.6.5",
"@types/redux-logger": "^3.0.13",
"@types/redux-promise": "^0.5.32",
"@types/sanitize-html": "^2.16.0",
"@types/systemjs": "^6.15.4",
"@types/testing-library__jest-dom": "^5.14.9",
"@types/uuid": "^8.3.4",
"@typescript-eslint/eslint-plugin": "^5.30.6",
"@typescript-eslint/parser": "^5.30.6",
"@wdio/junit-reporter": "^7.25.1",
"autoprefixer": "^10.4.12",
"@typescript-eslint/eslint-plugin": "^5.62.0",
"@typescript-eslint/parser": "^5.62.0",
"@wdio/junit-reporter": "^7.40.0",
"autoprefixer": "^10.4.22",
"babel-eslint": "^11.0.0-beta.2",
"babel-jest": "^29.2.0",
"babel-plugin-inline-react-svg": "^2.0.1",
"babel-jest": "^29.7.0",
"babel-plugin-inline-react-svg": "^2.0.2",
"babel-plugin-module-resolver": "^4.1.0",
"babel-plugin-named-exports-order": "^0.0.2",
"babel-plugin-react-css-modules": "^5.2.6",
"concurrently": "^7.4.0",
"craco-css-modules": "^1.0.5",
"concurrently": "^7.6.0",
"craco-css-modules": "^1.0.6",
"craco-plugin-env": "^1.0.5",
"craco-resolve-url-loader": "^1.0.0",
"cross-env": "^7.0.3",
"css-loader": "3.5.3",
"eslint": "^8.25.0",
"css-loader": "3.6.0",
"eslint": "^8.57.1",
"eslint-config-airbnb": "^19.0.4",
"eslint-config-react-app": "^7.0.1",
"eslint-config-react-important-stuff": "^3.0.0",
"eslint-import-resolver-typescript": "^3.2.5",
"eslint-plugin-import": "^2.25.3",
"eslint-import-resolver-typescript": "^3.10.1",
"eslint-plugin-import": "^2.32.0",
"eslint-plugin-ordered-imports": "^0.6.0",
"eslint-plugin-react": "^7.28.0",
"eslint-plugin-react-hooks": "^4.3.0",
"eslint-plugin-unicorn": "^46.0.0",
"eslint-plugin-react": "^7.37.5",
"eslint-plugin-react-hooks": "^4.6.2",
"eslint-plugin-unicorn": "^46.0.1",
"file-loader": "^6.2.0",
"husky": "^8.0.1",
"husky": "^8.0.3",
"identity-obj-proxy": "^3.0.0",
"istanbul-lib-coverage": "^3.2.0",
"jest": "^29.2.0",
"jest-cli": "^29.2.0",
"lint-staged": "^13.0.3",
"istanbul-lib-coverage": "^3.2.2",
"jest": "^29.7.0",
"jest-cli": "^29.7.0",
"lint-staged": "^13.3.0",
"nyc": "^15.1.0",
"postcss-loader": "^4.0.4",
"postcss-scss": "^3.0.2",
"pretty-quick": "^3.1.3",
"react-docgen-typescript": "^2.2.2",
"react-hot-loader": "^4.3.3",
"postcss-loader": "^4.3.0",
"postcss-scss": "^3.0.5",
"pretty-quick": "^3.3.1",
"react-docgen-typescript": "^2.4.0",
"react-hot-loader": "^4.13.1",
"resolve-url-loader": "^5.0.0",
"rimraf": "^6.0.1",
"rimraf": "^6.1.2",
"sass-loader": "^13.3.3",
"serve": "^14.0.1",
"start-server-and-test": "^1.14.0",
"storybook": "7.6.10",
"style-loader": "^3.3.1",
"serve": "^14.2.5",
"start-server-and-test": "^2.1.3",
"storybook": "7.6.20",
"style-loader": "^3.3.4",
"systemjs-webpack-interop": "^2.3.7",
"tsconfig-paths-webpack-plugin": "^4.0.1",
"typed-scss-modules": "^7.0.1",
"webpack": "^5.79.0",
"tsconfig-paths-webpack-plugin": "^4.2.0",
"typed-scss-modules": "^7.1.4",
"webpack": "^5.103.0",
"webpack-cli": "^4.10.0",
"webpack-config-single-spa-react": "^4.0.3",
"webpack-dev-server": "^4.11.1",
"webpack-merge": "^5.8.0"
"webpack-config-single-spa-react": "^4.0.5",
"webpack-dev-server": "^4.15.2",
"webpack-merge": "^5.10.0"
},
"resolutions": {
"@types/react": "18.0.35",
"string-width": "4.2.0"
"string-width": "4.2.0",
"node-fetch": "2.6.7",
"nth-check": "2.0.1",
"lodash.mergewith": "4.6.2"
},
"browserslist": {
"production": [
Expand Down
2 changes: 1 addition & 1 deletion src/apps/admin/src/lib/services/reports.service.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ const buildReportUrl = (path: string): string => {
}

export const fetchReportsIndex = async (): Promise<ReportsIndexResponse> => (
xhrGetAsync<ReportsIndexResponse>(`${EnvironmentConfig.API.V6}/reports`)
xhrGetAsync<ReportsIndexResponse>(`${EnvironmentConfig.API.V6}/reports/directory`)
)

const downloadReportBlob = async (path: string, accept: string): Promise<Blob> => {
Expand Down
1 change: 1 addition & 0 deletions src/apps/profiles/src/components/MemberBadgeModal/MemberBadgeModal.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,7 @@ const MemberBadgeModal: FC<MemberBadgeModalProps> = (props: MemberBadgeModalProp
{' '}
{format(new Date(props.selectedBadge.awarded_at), 'PPP')}
</div>
{/* @ts-expect-error: TS2786: ReactMarkdown cannot be used as a JSX component */}
Copy link

@github-actions github-actions bot Dec 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[⚠️ maintainability]
Using @ts-expect-error to suppress TypeScript errors should be avoided if possible, as it can hide potential issues. Investigate why ReactMarkdown cannot be used as a JSX component and address the root cause. This will improve maintainability and ensure type safety.

<ReactMarkdown
remarkPlugins={[
remarkFrontmatter,
Expand Down
Loading
Loading