Project

General

Profile

Actions
Copy link

Feature #163

open
NP NP

Canteen: overlong void reason or variance note returned a 500

Feature #163: Canteen: overlong void reason or variance note returned a 500

Added by Navya P. about 2 months ago. Updated about 1 month ago.

Status:
Resolved
Priority:
Normal
Assignee:
Navya P.
Target version:
-
Start date:
09/28/2026
Due date:
09/28/2026 (46 days late)
% Done:

100%

Estimated time:
Resolved By:
Navya P.

Description

Found in the security review of the void, day-close and register paths.

  • A void reason over 256 characters, a variance note over 500 or a cashier id over 200 reached the database and came back as an opaque 500.
  • Now refused in the domain with a 400 that names the limit; the request changes nothing.
  • The limit is measured on the trimmed text, which is what is stored.
  • Tests at the limit and one over, plus two HTTP tests; with the guard removed they fail with 500.
    Fixed in commit 681c0aa on integration/canteen-v1.
Actions
Copy link

Also available in: PDF Atom