Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Started implementing daraja support of stkpush #188

Draft
wants to merge 3 commits into
base: dev
Choose a base branch
from
Draft

Conversation

wechulisimiyu
Copy link
Owner

Still not tested, please do not merge

module.exports = router;
router.post('/stkpush', postStk);
router.post('/callback', callback);
router.post('/validate', validateTransaction);

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a database access
, but is not rate-limited.
const { payload } = req.body;
const MerchantRequestID = payload.MerchantRequestID;
try {
const transaction = await Transaction.findOne({ MerchantRequestID: MerchantRequestID });

Check failure

Code scanning / CodeQL

Database query built from user-controlled sources High

This query object depends on a
user-provided value
.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants