You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Apr 5, 2026. It is now read-only.
As a developer I want to avoid relying on client-side discount validation in src/javascript/frontend/services/cart.js So that users cannot tamper with discounts and apply unauthorized reductions
Acceptance Criteria
Remove or minimize business-critical discount validation on the client. Ensure the server verifies discount codes and calculates final totals.
Details
The file uses a local discounts map and computes discount amounts client-side (comment: "Client-side discount validation (insecure)"). This allows malicious users to bypass rules.
As a developer
I want to avoid relying on client-side discount validation in
src/javascript/frontend/services/cart.jsSo that users cannot tamper with discounts and apply unauthorized reductions
Acceptance Criteria
Details
The file uses a local
discountsmap and computes discount amounts client-side (comment: "Client-side discount validation (insecure)"). This allows malicious users to bypass rules.