Search results

SECURITY: No rate limiting on API endpoints — /api/rates returns 500 on every request

Status: Open.

#37 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

SEO: robots.txt missing Sitemap directive and disallow rules for API/admin routes

Status: Open.

#36 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

BUG: PWA manifest theme_color (#ffffff) conflicts with HTML meta theme-color (#a855f7)

Status: Open.

#34 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

SEC: /api/auth/register accepts single-character passwords — no password strength validation

Status: Open.

#33 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

BUG: POST /api/payments returns 405 Method Not Allowed with empty body — silent failure

Status: Open.

#32 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

SECURITY: /api/escrow endpoints accessible without authentication

Status: Open.

#30 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

BUG: /api/wallet returns HTML 404 page instead of JSON error response

Status: Open.

#29 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

SEC: X-Powered-By header exposes Next.js — information disclosure

Status: Open.

#28 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

SEC: HSTS max-age is only 300 seconds — should be at least 31536000

Status: Open.

#27 In profullstack/coinpayportal;

· Danieliushka opened on Feb 20, 2026

BUG: /api/v1/auth/* endpoints return 404 HTML — authentication API not mounted

Status: Open.

#25 In profullstack/coinpayportal;

· Danieliushka opened on Feb 19, 2026

UI: Footer renders in light mode while site uses dark theme — jarring contrast

Status: Open.

#24 In profullstack/coinpayportal;

· Danieliushka opened on Feb 19, 2026

SEO: Missing og:image meta tag — social media shares show no preview image

Status: Open.

#23 In profullstack/coinpayportal;

· Danieliushka opened on Feb 19, 2026