SFL

Epics

• - Capitans score
• - KPI's player
• - Export to pdf

Features

Todo FE

• Pagination DESC
• Charts
  • Dashboard
  • Game details
  • Player details
• Security
  • ngSrc, ngHref - security directives
• Deleted game should not display

Todo BE

• RBAC
• Logger
• 403 POST / PUT / PATCH
• Security
  • XSS
  • CSP
  • CSRF
  • URL Injection и Path Traversal
  • Insecure Direct Object References (IDOR)
  • Brute Force
  • Clickjacking
  • OWASP + Top Ten
  • 404 page

Tech

• JSON Convention data (use TResponse) ({data: {}})
• JWT guard / access to endpoints through token

---

Plan

• - Create user table and seed it with all players for all years https://orkhan-gitbook-io.translate.goog/typeorm/docs/migrations?_x_tr_sl=en&_x_tr_tl=ru&_x_tr_hl=ru&_x_tr_pto=wapp
  • - 2011
  • - 2012
  • - 2013
  • - 2014
  • - 2015
  • - 2016
  • - 2017
  • - 2018
  • - 2019
  • - 2020
  • - 2021
  • - 2022
  • - 2023