excid3/beginnerbounties.com

Small Projects for Junior Developers

👋 I'm a Ruby and Rails developer building things for the community.

💻 Here's a few of the projects I'm working on:

• GoRails - Screencasts for Ruby on Rails developers
• Jumpstart - A complete Ruby on Rails SaaS template
• Hatchbox - Hosting for Ruby and Rails apps
• RailsBytes - Reusable templates for adding features to Ruby on Rails apps
• Rails Hackathon - A weekend hackathon for Ruby on Rails developers to get together and build their ideas.
• Pay - A complete payments engine for Ruby on Rails apps
• Noticed - Notifications system for Ruby on Rails apps
• ActsAsTenant - Multitenancy for Ruby on Rails apps
• A bunch of other Ruby gems

✨ You can follow me on Twitter @excid3

If you like my work and want me to be able to keep improving it, please sponsor me on GitHub.

beginnerbounties.com's Issues

Horizontal scroll on mobile

It seems that there is a horizontal scroll in mobile.

I can fix it if that's OK with you

Stronger password requirement

At the moment, the password requirement is min. 6 characters long without any restrictions on uppercase, lowercase, numbers, or symbols. For example, a user's password could be 123456 and it would meet the requirement. To ensure all users have a secure password, could I increase the password requirement? I have implemented this before using Devise's custom password and would love to work on this issue. I've also attached an image of how long it takes a hacker to brute force a password.

Add pagination with Pagy

The pagy gem is an excellent gem for adding pagination. Let's add pagination to the Bounties and Users::Bounties controllers using pagy.

• Paginate the Bounties index
• Paginate the Users::Bounties index

This project has a $20 bounty.

Fix card overflow

Fix card overflow.

Direct object reference

https://github.com/excid3/beginnerbounties.com/blob/main/app/controllers/users/bounties_controller.rb#L56
I can create a bounty in someone else's account by setting the user_id to theirs. user_id should be removed from the permitted params.

Password reset emails do not send

Repro:

• navigate to https://beginnerbounties.com/users/password/new
• enter the email address of an existing user, then hit enter
• observe results

Expected:

Password reset email is sent.

Actual:

500 error page.

Additional info:

I suspect a missing or incorrect mailer configuration. When I enter a dummy email address and submit, the page reloads with a validation error "email not found." So the exception only seems to happen when the email entered is actually registered.

Updating user auth forms layout

### I did make a PR #39, updating the user auth forms layout

Add ability for Users to sign up to receive updates

No idea if this is something you think would be useful but was thinking of something very simple to start.

Something bare-bones like allowing a user to opt-in to weekly updates where new issues created in the past week are still open are emailed out once a week as a gentle nudge to keep people coming back and looking for new issues.

If this is too soon or out of scope from what you all have planned, feel free to close!

XSS in bounty.url

The bounty URL can be set to an arbitrary string, and then it is passed to link_to here: https://github.com/excid3/beginnerbounties.com/blob/main/app/views/bounties/_bounty.html.erb#L18
Since link_to accepts any URL schema, a malicious actor can set this to javascript: console.log('xss') and execute an XSS attack, which can have serious consequencies

Sign up button should have a more prominent style

Create testing suite to improve maintainability

Hi,

I noticed that the code for this project does not currently have any automated tests (especially for models). As tests can help ensure the reliability and maintainability of the codebase, I suggest that we add some automated tests to the project.

I'd be happy to help with this effort, so please let me know if this is something that you'd be interested in pursuing.

Thanks!

Add A Twitter Card to Beginner Bounties

There's currently some Open Graph, but no Twitter Card. Please add a Twitter Card so links on Twitter look great! ✨

Add GitHub Actions CI

We should run standardrb and the Rails tests on GitHub Actions for pull requests and on the main branch.

We need to add the standardrb gem and the following config to .github/workflows/ci.yml

name: Tests

on:
  pull_request:
    branches:
      - '*'
  push:
    branches:
      - main

jobs:
  test:
    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres:latest
        env:
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: password
        ports: ['5432:5432']

    steps:
      - uses: actions/checkout@v3

      - name: Setup Ruby
        uses: ruby/setup-ruby@v1
        with:
          bundler: default
          bundler-cache: true

      - name: Setup Node
        uses: actions/setup-node@v3
        with:
          node-version: '18'
          cache: yarn

      - name: Install dependencies
        run: |
          sudo apt-get install -y -qq libvips
          yarn install --frozen-lockfile

      - name: Standardrb Check
        run: bundle exec standardrb

      - name: Run tests
        env:
          DATABASE_URL: postgres://postgres:password@localhost:5432/test
          RAILS_ENV: test
          PG_USER: postgres
        run: |
          bin/rails test:prepare
          bin/rails db:test:prepare
          bin/rails test
          bin/rails test:system