wekan/server/lib/tests/index.js

import './utils.tests';
import './users.security.tests';
import './boards.security.tests';
import './cards.security.tests';
import './cards.methods.tests';
import './attachmentApi.tests';
Try to fix tests. Part 3. Thanks to xet7 ! 2021-06-24 23:37:13 +03:00			`import './utils.tests';`
Fix SECURITY ISSUE 2: Access to boards of any Orgs/Teams, and avatar permissions. Thanks to Siam Thanat Hack (STH) ! 2025-11-02 09:11:50 +02:00			`import './users.security.tests';`
Fix SECURITY ISSUE 3: Unauthenticated (or any) user can update board sort. Thanks to Siam Thanat Hack (STH) ! 2025-11-02 10:13:45 +02:00			`import './boards.security.tests';`
Fix SECURITY ISSUE 4: Members can forge others’ votes (Low). Bonus: Similar fixes to planning poker too done by xet7. Thanks to Siam Thanat Hack (STH) and xet7 ! 2025-11-02 11:12:41 +02:00			`import './cards.security.tests';`
			`import './cards.methods.tests';`
Fix SECURITY ISSUE 5: Attachment API uses bearer value as userId and DoS (Low). Thanks to Siam Thanat Hack (STH) and xet7 ! 2025-11-02 11:42:07 +02:00			`import './attachmentApi.tests';`