Validation of Group Name and Group Address is flawed #29

New issue

Closed

opened 2023-11-28 11:18:36 +01:00 by summersamara · 0 comments

summersamara commented

2023-11-28 11:18:36 +01:00

Collaborator

Problem: When creating or updating a Group, we can bypass the required fields validations by manipulating the html attributes of said fields (remove the "required" attr)

Affected fields:

group name
group address

Expected:
Groups MUST NOT be created or updated when a required field is empty.

The required fields validation should be done on the server side and be consistent with the front-end validation.

linked to #27

**Problem:** When creating or updating a Group, we can bypass the required fields validations by manipulating the html attributes of said fields (remove the "required" attr) Affected fields: - group name - group address **Expected:** Groups MUST NOT be created or updated when a required field is empty. The required fields validation should be done on the server side and be consistent with the front-end validation. linked to https://git.potsda.mn/potsda.mn/mobilizon/issues/27