service

Oct 18, 2023

Changes in this version

type AnswerService

+ func (as *AnswerService) RecoverAnswer(ctx context.Context, req *schema.RecoverAnswerReq) (err error)

type QuestionService

+ func (qs *QuestionService) RecoverQuestion(ctx context.Context, req *schema.QuestionRecoverReq) (err error)

Sep 6, 2023

Changes in this version

type AnswerService

+ func (as *AnswerService) AcceptAnswer(ctx context.Context, req *schema.AcceptAnswerReq) (err error)

type QuestionService

+ func (qs *QuestionService) GetQuestionsByTitle(ctx context.Context, title string) (resp []*schema.QuestionBaseInfo, err error)

Aug 24, 2023 GO-2023-2051

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type UserService

+ func (us *UserService) UserUnsubscribeNotification(ctx context.Context, req *schema.UserUnsubscribeNotificationReq) (err error)

Aug 2, 2023 GO-2023-2051

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type QuestionService

+ func (qs *QuestionService) AdminAnswerPage(ctx context.Context, req *schema.AdminAnswerPageReq) (resp *pager.PageModel, err error)

+ func (qs *QuestionService) AdminQuestionPage(ctx context.Context, req *schema.AdminQuestionPageReq) (resp *pager.PageModel, err error)

type VoteRepo

+ CancelVote func(ctx context.Context, op *schema.VoteOperationInfo) (err error)

+ GetAndSaveVoteResult func(ctx context.Context, objectID, objectType string) (up, down int64, err error)

+ Vote func(ctx context.Context, op *schema.VoteOperationInfo) (err error)

Jun 6, 2023 GO-2023-1995 +2 more

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type QuestionService

+ func (qs *QuestionService) HasNewTag(ctx context.Context, tags []*schema.TagItem) (bool, error)

+ func (qs *QuestionService) InviteUserInfo(ctx context.Context, questionID string) (inviteList []*schema.UserBasicInfo, err error)

+ func (qs *QuestionService) PersonalAnswerPage(ctx context.Context, req *schema.PersonalAnswerPageReq) (pageModel *pager.PageModel, err error)

+ func (qs *QuestionService) PersonalCollectionPage(ctx context.Context, req *schema.PersonalCollectionPageReq) (pageModel *pager.PageModel, err error)

+ func (qs *QuestionService) PersonalQuestionPage(ctx context.Context, req *schema.PersonalQuestionPageReq) (pageModel *pager.PageModel, err error)

+ func (qs *QuestionService) UpdateQuestionInviteUser(ctx context.Context, req *schema.QuestionUpdateInviteUser) (err error)

type UserService

+ func (us *UserService) SearchUserListByName(ctx context.Context, input *schema.GetOtherUserInfoByUsernameReq) ([]*schema.UserBasicInfo, error)

+ func (us *UserService) UpdatePasswordWhenForgot(ctx context.Context, req *schema.UserRePassWordRequest) (err error)

May 9, 2023 GO-2023-1995 +4 more

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Mar 27, 2023 GO-2023-1995 +4 more

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Apr 23, 2023 GO-2023-1995 +4 more

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type QuestionService

+ func (qs *QuestionService) OperationQuestion(ctx context.Context, req *schema.OperationQuestionReq) (err error)

Apr 11, 2023 GO-2023-1774 +5 more

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Mar 20, 2023 GO-2023-1716 +7 more

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Mar 7, 2023 GO-2023-1656 +9 more

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Feb 21, 2023 GO-2023-1612 +26 more

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Feb 7, 2023 GO-2023-1592 +27 more

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Jan 16, 2023 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Jan 4, 2023 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type QuestionService

+ func (qs *QuestionService) GetQuestionPage(ctx context.Context, req *schema.QuestionPageReq) (questions []*schema.QuestionPageResp, total int64, err error)

type UserService

+ func (us *UserService) UserUnsubscribeEmailNotification(ctx context.Context, req *schema.UserUnsubscribeEmailNotificationReq) (err error)

Dec 24, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type AnswerService

+ func (as *AnswerService) UpdateAccepted(ctx context.Context, req *schema.AnswerAcceptedReq) error

type QuestionService

+ func (qs *QuestionService) AdminSearchAnswerList(ctx context.Context, search *entity.AdminAnswerSearch, loginUserID string) ([]*schema.AdminAnswerInfo, int64, error)

+ func (qs *QuestionService) AdminSearchList(ctx context.Context, search *schema.AdminQuestionSearch, loginUserID string) ([]*schema.AdminQuestionInfo, int64, error)

+ func (qs *QuestionService) CheckAddQuestion(ctx context.Context, req *schema.QuestionAdd) (errorlist any, err error)

Dec 18, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type QuestionService

+ func (qs *QuestionService) AddQuestionCheckTags(ctx context.Context, Tags []*entity.Tag) ([]string, error)

+ func (qs *QuestionService) ReopenQuestion(ctx context.Context, req *schema.ReopenQuestionReq) error

+ func (qs *QuestionService) SetCache(ctx context.Context, cachekey string, info interface{}) error

+ func (qs *QuestionService) SitemapCron(ctx context.Context)

+ func (qs *QuestionService) UpdateQuestionCheckTags(ctx context.Context, req *schema.QuestionUpdate) (errorlist []*validator.FormErrorField, err error)

type UserService

+ func (us *UserService) UserRanking(ctx context.Context) (resp *schema.UserRankingResp, err error)

Dec 6, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type QuestionService

+ func (qs *QuestionService) CheckChangeReservedTag(ctx context.Context, oldobjectTagData, objectTagData []*entity.Tag) (bool, []string)

+ func (qs *QuestionService) GetQuestionAndAddPV(ctx context.Context, questionID, loginUserID string, ...) (resp *schema.QuestionInfo, err error)

type RevisionService

+ func (rs *RevisionService) CheckCanUpdateRevision(ctx context.Context, req *schema.CheckCanQuestionUpdate) (resp *schema.ErrTypeData, err error)

+ func (rs *RevisionService) GetUnreviewedRevisionPage(ctx context.Context, req *schema.RevisionSearch) (resp *pager.PageModel, err error)

+ func (rs *RevisionService) RevisionAudit(ctx context.Context, req *schema.RevisionAuditReq) (err error)

Nov 29, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Nov 23, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Nov 21, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type QuestionService

+ func (qs *QuestionService) CheckChangeTag(ctx context.Context, oldobjectTagData, objectTagData []*entity.Tag) (bool, []string)

Nov 11, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

type UserService

+ func (us *UserService) UserUpdateInterface(ctx context.Context, req *schema.UpdateUserInterfaceRequest) (err error)

Nov 1, 2022 GO-2023-1541 +33 more

  GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

  GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

  GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

  GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

  GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

  GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

  GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

  GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

  GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

  GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

  GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

  GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

  GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

  GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

  GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

  GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

  GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

  GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

  GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

Changes in this version

+ var ProviderSetService = wire.NewSet(comment.NewCommentService, comment_common.NewCommentCommonService, ...)

+ type AnswerService struct

+ AnswerCommon *answercommon.AnswerCommon

+ func NewAnswerService(answerRepo answercommon.AnswerRepo, questionRepo questioncommon.QuestionRepo, ...) *AnswerService

+ func (as *AnswerService) AdminSetAnswerStatus(ctx context.Context, answerID string, setStatusStr string) error

+ func (as *AnswerService) Get(ctx context.Context, answerID, loginUserID string) (*schema.AnswerInfo, *schema.QuestionInfo, bool, error)

+ func (as *AnswerService) Insert(ctx context.Context, req *schema.AnswerAddReq) (string, error)

+ func (as *AnswerService) RemoveAnswer(ctx context.Context, id string) (err error)

+ func (as *AnswerService) SearchFormatInfo(ctx context.Context, dblist []*entity.Answer, loginUserID string) ([]*schema.AnswerInfo, error)

+ func (as *AnswerService) SearchList(ctx context.Context, search *schema.AnswerList) ([]*schema.AnswerInfo, int64, error)

+ func (as *AnswerService) ShowFormat(ctx context.Context, data *entity.Answer) *schema.AnswerInfo

+ func (as *AnswerService) Update(ctx context.Context, req *schema.AnswerUpdateReq) (string, error)

+ func (as *AnswerService) UpdateAdopted(ctx context.Context, req *schema.AnswerAdoptedReq) error

+ type CollectionGroupRepo interface

+ AddCollectionDefaultGroup func(ctx context.Context, userID string) (collectionGroup *entity.CollectionGroup, err error)

+ AddCollectionGroup func(ctx context.Context, collectionGroup *entity.CollectionGroup) (err error)

+ GetCollectionGroup func(ctx context.Context, id string) (collectionGroup *entity.CollectionGroup, exist bool, err error)

+ GetCollectionGroupPage func(ctx context.Context, page, pageSize int, ...) (collectionGroupList []*entity.CollectionGroup, total int64, err error)

+ GetDefaultID func(ctx context.Context, userID string) (collectionGroup *entity.CollectionGroup, has bool, err error)

+ UpdateCollectionGroup func(ctx context.Context, collectionGroup *entity.CollectionGroup, cols []string) (err error)

+ type CollectionGroupService struct

+ func NewCollectionGroupService(collectionGroupRepo CollectionGroupRepo) *CollectionGroupService

+ func (cs *CollectionGroupService) AddCollectionGroup(ctx context.Context, req *schema.AddCollectionGroupReq) (err error)

+ func (cs *CollectionGroupService) GetCollectionGroup(ctx context.Context, id string) (resp *schema.GetCollectionGroupResp, err error)

+ func (cs *CollectionGroupService) UpdateCollectionGroup(ctx context.Context, req *schema.UpdateCollectionGroupReq, cols []string) (err error)

+ type CollectionService struct

+ func NewCollectionService(collectionRepo collectioncommon.CollectionRepo, ...) *CollectionService

+ func (cs *CollectionService) CollectionSwitch(ctx context.Context, dto *schema.CollectionSwitchDTO) (resp *schema.CollectionSwitchResp, err error)

+ type QuestionService struct

+ func NewQuestionService(questionRepo questioncommon.QuestionRepo, ...) *QuestionService

+ func (qs *QuestionService) AddQuestion(ctx context.Context, req *schema.QuestionAdd) (questionInfo *schema.QuestionInfo, err error)

+ func (qs *QuestionService) AdminSetQuestionStatus(ctx context.Context, questionID string, setStatusStr string) error

+ func (qs *QuestionService) ChangeTag(ctx context.Context, objectTagData *schema.TagChange) error

+ func (qs *QuestionService) CloseMsgList(ctx context.Context, lang i18n.Language) (resp []*schema.GetCloseTypeResp, err error)

+ func (qs *QuestionService) CloseQuestion(ctx context.Context, req *schema.CloseQuestionReq) error

+ func (qs *QuestionService) CmsSearchAnswerList(ctx context.Context, search *entity.CmsAnswerSearch, loginUserID string) ([]*schema.AdminAnswerInfo, int64, error)

+ func (qs *QuestionService) CmsSearchList(ctx context.Context, search *schema.CmsQuestionSearch, loginUserID string) ([]*schema.AdminQuestionInfo, int64, error)

+ func (qs *QuestionService) GetQuestion(ctx context.Context, id, loginUserID string, addpv bool) (resp *schema.QuestionInfo, err error)

+ func (qs *QuestionService) RemoveQuestion(ctx context.Context, req *schema.RemoveQuestionReq) (err error)

+ func (qs *QuestionService) SearchByTitleLike(ctx context.Context, title string, loginUserID string) ([]*schema.QuestionBaseInfo, error)

+ func (qs *QuestionService) SearchList(ctx context.Context, req *schema.QuestionSearch, loginUserID string) ([]*schema.QuestionInfo, int64, error)

+ func (qs *QuestionService) SearchUserAnswerList(ctx context.Context, userName, order string, page, pageSize int, ...) ([]*schema.UserAnswerInfo, int64, error)

+ func (qs *QuestionService) SearchUserCollectionList(ctx context.Context, page, pageSize int, loginUserID string) ([]*schema.QuestionInfo, int64, error)

+ func (qs *QuestionService) SearchUserList(ctx context.Context, userName, order string, page, pageSize int, ...) ([]*schema.UserQuestionInfo, int64, error)

+ func (qs *QuestionService) SearchUserTopList(ctx context.Context, userName string, loginUserID string) ([]*schema.UserQuestionInfo, []*schema.UserAnswerInfo, error)

+ func (qs *QuestionService) SimilarQuestion(ctx context.Context, questionID string, loginUserID string) ([]*schema.QuestionInfo, int64, error)

+ func (qs *QuestionService) UpdateQuestion(ctx context.Context, req *schema.QuestionUpdate) (questionInfo *schema.QuestionInfo, err error)

+ type RevisionService struct

+ func NewRevisionService(revisionRepo revision.RevisionRepo, userCommon *usercommon.UserCommon, ...) *RevisionService

+ func (rs *RevisionService) GetRevisionList(ctx context.Context, req *schema.GetRevisionListReq) (resp []schema.GetRevisionResp, err error)

+ type Search interface

+ Parse func(dto *schema.SearchDTO) (ok bool)

+ Search func(ctx context.Context) (resp []schema.SearchResp, total int64, err error)

+ type SearchService struct

+ func NewSearchService(searchRepo search_common.SearchRepo, tagRepo tagcommon.TagRepo, ...) *SearchService

+ func (ss *SearchService) Search(ctx context.Context, dto *schema.SearchDTO) (resp []schema.SearchResp, total int64, extra interface{}, err error)

+ type SiteInfoService struct

+ func NewSiteInfoService(siteInfoRepo siteinfo_common.SiteInfoRepo, emailService *export.EmailService) *SiteInfoService

+ func (s *SiteInfoService) GetSMTPConfig(ctx context.Context) (resp *schema.GetSMTPConfigResp, err error)

+ func (s *SiteInfoService) GetSiteGeneral(ctx context.Context) (resp schema.SiteGeneralResp, err error)

+ func (s *SiteInfoService) GetSiteInterface(ctx context.Context) (resp schema.SiteInterfaceResp, err error)

+ func (s *SiteInfoService) SaveSiteGeneral(ctx context.Context, req schema.SiteGeneralReq) (err error)

+ func (s *SiteInfoService) SaveSiteInterface(ctx context.Context, req schema.SiteInterfaceReq) (err error)

+ func (s *SiteInfoService) UpdateSMTPConfig(ctx context.Context, req *schema.UpdateSMTPConfigReq) (err error)

+ type UserService struct

+ func NewUserService(userRepo usercommon.UserRepo, userActivity activity.UserActiveActivityRepo, ...) *UserService

+ func (us *UserService) EmailLogin(ctx context.Context, req *schema.UserEmailLogin) (resp *schema.GetUserResp, err error)

+ func (us *UserService) GetOtherUserInfoByUsername(ctx context.Context, username string) (resp *schema.GetOtherUserInfoResp, err error)

+ func (us *UserService) GetUserInfoByUserID(ctx context.Context, token, userID string) (resp *schema.GetUserToSetShowResp, err error)

+ func (us *UserService) GetUserStatus(ctx context.Context, userID, token string) (resp *schema.GetUserStatusResp, err error)

+ func (us *UserService) RetrievePassWord(ctx context.Context, req *schema.UserRetrievePassWordRequest) (string, error)

+ func (us *UserService) UpdateInfo(ctx context.Context, req *schema.UpdateInfoRequest) (err error)

+ func (us *UserService) UseRePassword(ctx context.Context, req *schema.UserRePassWordRequest) (resp *schema.GetUserResp, err error)

+ func (us *UserService) UserChangeEmailSendCode(ctx context.Context, req *schema.UserChangeEmailSendCodeReq) error

+ func (us *UserService) UserChangeEmailVerify(ctx context.Context, content string) (err error)

+ func (us *UserService) UserEmailHas(ctx context.Context, email string) (bool, error)

+ func (us *UserService) UserModifyPassWordVerification(ctx context.Context, request *schema.UserModifyPassWordRequest) (bool, error)

+ func (us *UserService) UserModifyPassword(ctx context.Context, request *schema.UserModifyPassWordRequest) error

+ func (us *UserService) UserNoticeSet(ctx context.Context, userID string, noticeSwitch bool) (resp *schema.UserNoticeSetResp, err error)

+ func (us *UserService) UserRegisterByEmail(ctx context.Context, registerUserInfo *schema.UserRegisterReq) (resp *schema.GetUserResp, err error)

+ func (us *UserService) UserVerifyEmail(ctx context.Context, req *schema.UserVerifyEmailReq) (resp *schema.GetUserResp, err error)

+ func (us *UserService) UserVerifyEmailSend(ctx context.Context, userID string) error

+ type VoteRepo interface

+ GetVoteResultByObjectId func(ctx context.Context, objectID string) (resp *schema.VoteResp, err error)

+ ListUserVotes func(ctx context.Context, userID string, req schema.GetVoteWithPageReq, ...) (voteList []entity.Activity, total int64, err error)

+ VoteDown func(ctx context.Context, objectID string, userID, objectUserID string) (resp *schema.VoteResp, err error)

+ VoteDownCancel func(ctx context.Context, objectID string, userID, objectUserID string) (resp *schema.VoteResp, err error)

+ VoteUp func(ctx context.Context, objectID string, userID, objectUserID string) (resp *schema.VoteResp, err error)

+ VoteUpCancel func(ctx context.Context, objectID string, userID, objectUserID string) (resp *schema.VoteResp, err error)

+ type VoteService struct

+ UniqueIDRepo unique.UniqueIDRepo

+ func NewVoteService(VoteRepo VoteRepo, uniqueIDRepo unique.UniqueIDRepo, ...) *VoteService

+ func (as *VoteService) VoteDown(ctx context.Context, dto *schema.VoteDTO) (voteResp *schema.VoteResp, err error)

+ func (as *VoteService) VoteUp(ctx context.Context, dto *schema.VoteDTO) (voteResp *schema.VoteResp, err error)

+ func (vs *VoteService) GetObjectUserID(ctx context.Context, objectID string) (userID string, err error)

+ func (vs *VoteService) ListUserVotes(ctx context.Context, req schema.GetVoteWithPageReq) (model *pager.PageModel, err error)