Security vulnerabilities and automated fixes for debug endpoint issues
1 post found
A critical security vulnerability in `routes.js` exposed a `/test` endpoint in production without any authentication or authorization checks, potentially allowing attackers to gather system information and reconnaissance data. The fix restricts this debugging endpoint to non-production environments only, preventing unauthorized access while preserving development functionality.