New branch

.gitignore

@@ -2,3 +2,4 @@
 .idea
 **/target/**
 **/.DS_Store
+settings.xml

.gradle/buildOutputCleanup/cache.properties

@@ -0,0 +1,2 @@
+#Tue Mar 04 12:06:10 EST 2025
+gradle.version=8.8

.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+patch: {}
+exclude:
+    global:
+    - todolist-goof/exploits/zip-slip.py

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "snyk.allIssuesVsNetNewIssues": "All issues"
+}

Jenkinsfile

@@ -0,0 +1,58 @@
+pipeline {
+    agent any
+
+    stages {
+        stage('Checkout') {
+            steps {
+                git branch: 'main', url: 'https://github.com/dollav/java-goof.git'
+            }
+        }
+
+        stage('Build') {
+            steps {
+                sh 'mvn clean install -DskipTests' // Skip tests for a faster build, remove -DskipTests to run tests.
+            }
+        }
+
+        stage('Download Snyk CLI') {
+            steps {
+                sh '''
+                    curl -Lo ./snyk https://downloads.snyk.io/cli/stable/snyk-linux-arm64
+                    chmod +x snyk
+                    ls -la
+                    ./snyk -v
+                '''
+            }
+        }
+
+
+        stage('Snyk Scan') {
+            steps {
+                script {
+                    withCredentials([string(credentialsId: 'SNYK_TOKEN', variable: 'API_TOKEN')]){
+                    sh """
+                    ./snyk auth $API_TOKEN
+                    ./snyk test --all-projects
+                    """
+                    }
+                }
+            }
+        }
+
+
+        stage('Publish') {
+            steps {
+                // Example: Publish to a Maven repository
+                // You'll need to configure your Maven settings and credentials
+                // sh 'mvn deploy'
+                echo 'Publish stage - configure as needed'
+            }
+        }
+
+    }
+    post {
+        always {
+            cleanWs() // Clean the workspace after each build
+        }
+    }
+}

app.js

@@ -0,0 +1,88 @@
+/**
+ * Module dependencies.
+ */
+
+// mongoose setup
+require('./mongoose-db');
+require('./typeorm-db')
+
+var st = require('st');
+var crypto = require('crypto');
+var express = require('express');
+var http = require('http');
+var path = require('path');
+var ejsEngine = require('ejs-locals');
+var bodyParser = require('body-parser');
+var session = require('express-session')
+var methodOverride = require('method-override');
+var logger = require('morgan');
+var errorHandler = require('errorhandler');
+var optional = require('optional');
+var marked = require('marked');
+var fileUpload = require('express-fileupload');
+var dust = require('dustjs-linkedin');
+var dustHelpers = require('dustjs-helpers');
+var cons = require('consolidate');
+const hbs = require('hbs')
+
+var app = express();
+var routes = require('./routes');
+var routesUsers = require('./routes/users.js')
+
+// all environments
+app.set('port', process.env.PORT || 3001);
+app.engine('ejs', ejsEngine);
+app.engine('dust', cons.dust);
+app.engine('hbs', hbs.__express);
+cons.dust.helpers = dustHelpers;
+app.set('views', path.join(__dirname, 'views'));
+app.set('view engine', 'ejs');
+app.use(logger('dev'));
+app.use(methodOverride());
+app.use(session({
+  secret: 'keyboard cat',
+  name: 'connect.sid',
+  cookie: { path: '/' }
+}))
+app.use(bodyParser.json());
+app.use(bodyParser.urlencoded({ extended: false }));
+app.use(fileUpload());
+
+// Routes
+app.use(routes.current_user);
+app.get('/', routes.index);
+app.get('/login', routes.login);
+app.post('/login', routes.loginHandler);
+app.get('/admin', routes.isLoggedIn, routes.admin);
+app.get('/account_details', routes.isLoggedIn, routes.get_account_details);
+app.post('/account_details', routes.isLoggedIn, routes.save_account_details);
+app.get('/logout', routes.logout);
+app.post('/create', routes.create);
+app.get('/destroy/:id', routes.destroy);
+app.get('/edit/:id', routes.edit);
+app.post('/update/:id', routes.update);
+app.post('/import', routes.import);
+app.get('/about_new', routes.about_new);
+app.get('/chat', routes.chat.get);
+app.put('/chat', routes.chat.add);
+app.delete('/chat', routes.chat.delete);
+app.use('/users', routesUsers)
+
+// Static
+app.use(st({ path: './public', url: '/public' }));
+
+// Add the option to output (sanitized!) markdown
+marked.setOptions({ sanitize: true });
+app.locals.marked = marked;
+
+// development only
+if (app.get('env') == 'development') {
+  app.use(errorHandler());
+}
+
+var token = 'SECRET_TOKEN_f8ed84e8f41e4146403dd4a6bbcea5e418d23a9';
+console.log('token: ' + token);
+
+http.createServer(app).listen(app.get('port'), function () {
+  console.log('Express server listening on port ' + app.get('port'));
+});