Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PM-17780] Running the exposed passwords synchronously #13163

Merged
merged 2 commits into from
Jan 31, 2025

Conversation

ttalty
Copy link
Contributor

@ttalty ttalty commented Jan 30, 2025

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-17780

📔 Objective

Running the exposed password api call to hibp synchronously to fix some performance issues.

⏰ Reminders before review

  • Contributor guidelines followed
  • All formatters and local linters executed and passed
  • Written new unit and / or integration tests where applicable
  • Protected functional changes with optionality (feature flags)
  • Used internationalization (i18n) for all UI strings
  • CI builds passed
  • Communicated to DevOps any deployment requirements
  • Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

  • 👍 (:+1:) or similar for great changes
  • 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
  • ❓ (:question:) for questions
  • 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
  • 🎨 (:art:) for suggestions / improvements
  • ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
  • 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
  • ⛏ (:pick:) for minor or nitpick changes

@ttalty ttalty marked this pull request as ready for review January 30, 2025 18:39
@ttalty ttalty requested a review from a team as a code owner January 30, 2025 18:39
@ttalty ttalty enabled auto-merge (squash) January 30, 2025 18:39
Copy link
Contributor

github-actions bot commented Jan 30, 2025

Logo
Checkmarx One – Scan Summary & Details217688c6-d736-4611-95c6-42a51c2c0aaf

New Issues (3)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2024-21538 Npm-cross-spawn-7.0.3 Vulnerable Package
MEDIUM CVE-2024-55565 Npm-nanoid-3.3.7 Vulnerable Package
LOW Client_Use_Of_Iframe_Without_Sandbox /apps/browser/src/autofill/content/notification-bar.ts: 872
detailsThe application employs an HTML iframe at whose contents are not properly sandboxed
Attack Vector
Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
LOW Client_Use_Of_Iframe_Without_Sandbox /apps/browser/src/autofill/content/notification-bar.ts: 881

Copy link

codecov bot commented Jan 30, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 35.49%. Comparing base (cbba1a6) to head (39401aa).
Report is 10 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main   #13163   +/-   ##
=======================================
  Coverage   35.48%   35.49%           
=======================================
  Files        3007     3007           
  Lines       90872    90879    +7     
  Branches    16904    16905    +1     
=======================================
+ Hits        32250    32257    +7     
  Misses      56120    56120           
  Partials     2502     2502           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@djsmith85 djsmith85 self-requested a review January 31, 2025 13:14
Comment on lines +276 to +279
promises.push(promise);
}
});
await Promise.all(promises);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🌱 As we are using this pattern over a couple of services (password-health.service and exposed-password-report), could you please looking into merging this into a single service, than can be called from the different components/services that need it.

@ttalty ttalty merged commit 9197ea6 into main Jan 31, 2025
22 checks passed
@ttalty ttalty deleted the tools/pm-17780/hipb-performance-fix branch January 31, 2025 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants