four instances of // parseError in registry-user.controller/index.js

[ElectricNroff]

For example,

cve-services/src/controller/registry-user.controller/index.js

Lines 142 to 143 in 0e528de

	param(['identifier']).isString().trim(),
	// parseError,

Here, validation errors are discarded, e.g., getUser in registry-user.controller.js can be called even if identifier doesn't have the string data type.

[david-rocca]

Developers Notes

Background:

This seems to have been turned off during development. I am not sure how this was not caught by integration tests.

Priority: High

Bug

As the bug report says, parseError was commented out in a few places. This would cause some issues to not get caught.

Action

1. Un-comment parseError
2. Write integration tests that will check for this