ProfAvery

CPSC 449 - Web Back-End Engineering

Exercise 1 - Fall 2023

This exercise may be completed individually, or in a pair with another student. If you work with another student, only one of you needs to submit via Canvas.

Exercise

By the end of this exercise you will have written Node.js programs to obtain information from REST and GraphQL APIs for an online music store.

ProfAvery

#!/usr/bin/env node

// See https://chatgpt.com/share/67331281-9cec-800b-99fb-c193630dffa1

const http = require('http');
const { URL } = require('url');

const PORT = 8000;
const TARGET_PORT = 65412;
const TARGET_HOST = 'localhost';

ProfAvery

// Prototype pollution, part 1
// See https://learning.oreilly.com/library/view/grokking-web-application/9781633438262/OEBPS/Text/11.html#heading_id_10

const food = {
  munch() {
    console.log('Eating')
  },
}

const sandwich = {

ProfAvery

ProfAvery

<!-- Edit to taste, e.g. <HostFolder>s and <MemoryInMB> -->
<Configuration>
  <vGpu>Disable</vGpu>
  <Networking>Disable</Networking>
  <MappedFolders>
    <MappedFolder>
      <HostFolder>C:\Development\cpsc458\tools</HostFolder>
      <SandboxFolder>C:\Users\WDAGUtilityAccount\Desktop\tools</SandboxFolder>
      <ReadOnly>true</ReadOnly>
    </MappedFolder>

ProfAvery

# This goes after the call to LetsPlot.setup_html(),
# but before calling ggplot().

def setup_svg():
  def _repr_svg_(self):
    from io import BytesIO
    from sys import stdout
    file_like = BytesIO()
    self.to_svg(file_like)
    return file_like.getvalue().decode(stdout.encoding)

ProfAvery

<configuration>
  <startup>
    <supportedRuntime version="v4.0" />
  </startup>
</configuration>

ProfAvery

/**
 * @jest-environment jsdom
 */

import { act, render, fireEvent } from "@testing-library/react";
import PageComponentWeather from "../../../pages/components/weather";

describe("PageComponentWeather", () => {
  test("renders correctly", async () => {
    let component: any;

ProfAvery

import type {NextApiRequest, NextApiResponse, NextApiHandler} from "next";
import {findByZip} from "./../../../../mongoose/weather/services";
import dbConnect from "./../../../../middleware/db-connect";

async function handler(
    req: NextApiRequest,
    res: NextApiResponse
): Promise<NextApiResponse<WeatherDetailType> | void> {
    let data = await findByZip(req.query.zipcode as string);
    return res.status(200).json(data);

ProfAvery

const query = `
query {
  artists(where: {name: "Red Hot Chili Peppers"}) {
    albums {
      title
    }
  }
}
`;