Skip to content

Add Biome formatter instead of Eslint#5

Merged
symonbaikov merged 1 commit intomasterfrom
feat/add-biome-formatter
Sep 9, 2025
Merged

Add Biome formatter instead of Eslint#5
symonbaikov merged 1 commit intomasterfrom
feat/add-biome-formatter

Conversation

@symonbaikov
Copy link
Copy Markdown
Collaborator

No description provided.

@symonbaikov symonbaikov merged commit 87330d4 into master Sep 9, 2025
5 of 6 checks passed
Comment thread apps/api/index.js
app.use(
cors({
origin: [
'http://localhost:3000',

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note

Do not leave debug code in production
Comment thread apps/api/index.js
cors({
origin: [
'http://localhost:3000',
'http://localhost:3001',

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note

Do not leave debug code in production
Comment thread apps/api/routes/upload.js
res.status(500).json({ error: 'Failed to upload image' });
}
// Generate the full URL for the uploaded image
// For development, use localhost:3001, for production use the actual domain

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note

Do not leave debug code in production
Comment thread apps/api/routes/upload.js
}
// Generate the full URL for the uploaded image
// For development, use localhost:3001, for production use the actual domain
const baseUrl = req.get('host')?.includes('localhost')

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note

Do not leave debug code in production
Comment thread apps/api/routes/upload.js
// Generate the full URL for the uploaded image
// For development, use localhost:3001, for production use the actual domain
const baseUrl = req.get('host')?.includes('localhost')
? 'http://localhost:3001'

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note

Do not leave debug code in production
Comment on lines +25 to +26
const loadingTimeout = setTimeout(() => {
startLoadingWithProgress(1200);

Check notice

Code scanning / devskim

If untrusted data (data from HTTP requests, user submitted files, etc.) is included in an setTimeout statement it can allow an attacker to inject their own code. Note

Review setTimeout for untrusted data
Comment thread tests/setup.jsx
vi.stubEnv('VITE_API_URL', 'http://localhost:3001')
vi.stubEnv('VITE_CLERK_PUBLISHABLE_KEY', 'test_clerk_key')
vi.stubEnv('VITE_STRIPE_PUBLISHABLE_KEY', 'test_stripe_key')
vi.stubEnv('VITE_API_URL', 'http://localhost:3001');

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note test

Do not leave debug code in production
});
try {
const response = await fetch(
'http://localhost:3001/api/messages/broadcast',

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note

Do not leave debug code in production
userId: '3d55c6be-e9c0-490b-a4ba-daf4134445c1',
shuttle: false,
meals: false,
imageUrl: 'http://localhost:3001/images/jobs/test-image.png',

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note test

Do not leave debug code in production
Comment thread vite.config.js
host: '0.0.0.0',
proxy: {
'/api': {
target: 'http://localhost:3001',

Check notice

Code scanning / devskim

Accessing localhost could indicate debug code, or could hinder scaling. Note

Do not leave debug code in production
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants