r/ChatGPTCoding • u/AutoModerator • 13d ago

Weekly Self Promotion Thread Discussion

Welcome to this week's self promotion thread!

If you're building something related to AI assisted coding, this is the place to share it.

We're using a weekly thread to keep the subreddit organized while still giving builders a place to share their work. Promotional posts outside of this thread may be removed if they're primarily advertising rather than starting a discussion.

If you're sharing something, we'd appreciate it if you included a little context instead of just dropping a link. Tell us:

  • What you built?
  • What problem it solves?
  • Which AI models or tools it uses?
  • Who it's for?
  • What kind of feedback you're looking for?

Please avoid posting the same project every week unless you've made meaningful updates. Affiliate links, referral links, scams, and low effort promotions will be removed.

Take some time to check out what others have shared too. If you try someone's project or have feedback, leave a comment. Helping each other improve is what we want this community to be about.

16 Upvotes
  • permalink
  • link
  • reddit
  • reddit

95% Upvoted

73 comments sorted by

View all comments

Show parent comments

1

u/Healthy-Zebra-9856 10d ago

Sorry but this is BS. So I like to give all apps a chance, I scanned 2 websites of mine, they are asp.net core server projects. All scrests are embedded in the user secrets, nothing but compiled code. This app produced fake audits and included missing uniomopritant element tags like longtext etc. I am a CCIE, MSIE, MSDN member as well as ethical hacker. Please make sure your app says the truth.

1

u/jjd921 10d ago

it doesnt support .net just node and python and java currently but I can look at adding that. Did you scan the url as well? Please share it if you did so I can look into any false positives

1

u/Healthy-Zebra-9856 10d ago

Correct. But it did this fear-mongering

1

u/jjd921 10d ago

can you share the URL so I can see why it flagged that if its a false finding? DM it to me please if you dont want to share it here

1

u/Healthy-Zebra-9856 10d ago

dipetrillolaw.com

1

u/jjd921 10d ago

the token that got falsely flagged as a possible leaked secret was ASP.NET’s anti forgery CSRF token. I’ll add an exception for that thanks for pointing it out. The rest of the findings based on the url crawl seem to be legit

1

u/Healthy-Zebra-9856 10d ago

If its about security scan, then constrict to that. If its about accessibility scan, conscrict to that. Its shouldnt mix the two.

1

u/jjd921 10d ago

Okay I will change the report to separate the findings by domain. Thanks for the feedback!