Skip to content

Conversation

kumaran-s-8604
Copy link

Changes and flow impact:

CloudConfig: added fallback credentials, logs secrets, exposes a public static Cloudinary instance, disables SSL verification, and includes a weak token generator — affects app startup and config flows.
UserDao: uses DriverManager with hard-coded creds, builds SQL via string concatenation, uses MD5 and logs hashes — affects user lookup/auth DB flow.
ImageService: thread-unsafe formatter, InputStream not closed, raw Map usage, and silent exception handling — affects image upload and processing.
ImageController: permissive CORS, no upload validation, and leaks exception messages — affects upload API surface and client error handling.
Hobby model: inconsistent equals/hashCode and mutable id — affects entity equality and collection behavior.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant