Skip to content

Conversation

@Naquiao
Copy link
Member

@Naquiao Naquiao commented Jul 30, 2025

Enhance cart functionality

Naquiao and others added 2 commits July 30, 2025 16:56
…ic shipping options, promo code section, and improved order summary display
@vercel
Copy link

vercel bot commented Jul 30, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
bugster-nextjs-example ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 30, 2025 8:11pm

@bugster-dev
Copy link

bugster-dev bot commented Jul 31, 2025

✅ Bugster - E2E Results


📝 Test Suggestions: I've created PR #7 with suggested test improvements. Please review and merge the tests you want to include.


Status: SUCCESS
Summary: All tests passed successfully

Test Results: 8/8 tests passed

View detailed results

@bugster-dev
Copy link

bugster-dev bot commented Jul 31, 2025

❌ Bugster - Destructive Results

Status: FAILURE
Summary: Some bugs found during execution

Destructive Run Results: 10 bugs found in 4 sessions

Bugs Found:

  • Client-Side Promo Code Exposure (Page: app/cart/page.tsx)
    • Valid promo codes are hardcoded in the client-side JavaScript code, making them easily discoverable by viewing source code or browser dev tools
  • Client-Side Price Manipulation (Page: app/cart/page.tsx)
    • Product prices are calculated client-side with hardcoded values, allowing users to modify prices through browser developer tools
  • Missing XSS Protection on Promo Code Input (Page: app/cart/page.tsx)
    • The promo code input field lacks proper sanitization, potentially allowing XSS attacks through malicious script injection
  • Race Condition in Promo Code Application (Page: app/cart/page.tsx)
    • No protection against rapid form submissions could allow users to apply multiple promo codes simultaneously
  • Free Delivery Threshold Bypass (Page: app/cart/page.tsx)
    • Free delivery eligibility is calculated client-side and can be manipulated to incorrectly trigger free shipping

...and 5 more bugs. View all bugs in detailed results

View detailed results

@Bugsterapp Bugsterapp deleted a comment from bugster-dev bot Jul 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants