TASK9142orders.py: (T1-2 N+1 Query Explosion & The SQL-Injection Trap)📄 orders.py (get_orders)
GAUNTLET VERDICT: ACCEPT
1. Baseline & Telemetry
2. Hypothesis Timeline
3. Diff & Exploit Inspector
4. Zero-Compromise Console
5. Live Sandbox Terminal
6. Live DAST Scanner
| CHECK ID | SEVERITY | FINDING | SOURCE MAP | ACTION |
|---|---|---|---|---|
| D-01 | Medium | Missing Security Headers (CSP, HSTS, X-Content-Type-Options) Main document response omitted Content-Security-Policy and X-Content-Type-Options: nosniff headers. | next.config.js | |
| D-02 | Medium | Permissive CSP Contains 'unsafe-inline' and Wildcard (*) script-src directive includes 'unsafe-inline' and wildcard origin (*). | middleware.ts | |
| D-03 | Medium | Insecure Session Cookie Missing HttpOnly & SameSite=Strict Cookie 'session_id' set without HttpOnly flag; accessible to client JavaScript. | src/server/auth.ts | |
| D-05 | High | Exposed Client-Side AWS Access Key in Script Bundle Production JS bundle includes AWS IAM credential literal. | .env.production | |
| D-06 | High | DOM-Based XSS: location.hash Flows into innerHTML Sink Dynamic probe confirmed marker canary string reached Element.innerHTML sink without sanitization. | src/components/SearchBox.tsx | |
| D-07 | High | Exposed Public Environment File (/.env) HTTP GET /.env returned status 200 with matching KEY=VALUE content signature. | public/.env |