dastinnette / idea-box2.0 Goto Github PK

App left wide open for XSS attacks due to no validations put on input fields. I aim to fix that.

On app's main page:

• Each idea has link to edit
• Clicking 'edit' DOES NOT take user to separate page
• After clicking 'edit' user sees form fields to modify idea's title and body ONLY
• Clicking 'save' to edits creates a PUT request using AJAX
• Edit persists upon page reload

Idea quality default: swill

• Each idea includes 'thumps up' & 'thumbs down' button
• Clicking 'thumbs up' increases quality one notch
• Clicking 'thumbs down' decreases quality one notch
• Incrementing 'genius' or decrementing 'swill' has no effect

In application root:

• User can see all existing ideas (title, body, quality)
• Idea bodies > 100 characters truncated to nearest word
• Ideas appear with newest idea at top

When viewing idea list:

• Each idea accompanied by 'Delete' button
• Upon click 'delete' idea removed from list
• Page DOES NOT reload upon idea delete
• Idea removed from database & delete persists on page reload

-Title (string)

• Body (string)
• Quality (Genius, plausible, swill)
  • Default: swill

In app's main page:

• User sees 2 boxes (title and body) with a save button underneath

Upon save:

• New idea with title & body appear in idea list
• Text fields clear, ready for new idea
• Page DOES NOT reload
• Idea commits to database & persists upon page reload

On app main page:

• User sees 'search' text field
• As search query entered, list of ideas filter in real time to display only ideas whose title or body include user's query text. Page SHOULD NOT reload
• Clearing search box restores all ideas to list