owasp-blt / blt-flutter

The official OWASP BLT App repository/ Heist 'em bugs!

OWASP BLT

Report Bugs, Secure the Web and Win Points!

       

Check exiting issues.

Find the bugs and issues in current websites, maybe help fixing 'em too?

Report Bugs

Heist those sneaky bugs on different websites and apps & report them. Get points too, companies are held accountable!

Get Renowned

Fight with other like minded bug and bounty hunters across the word to get on top of the leaderboard!

Start bughunts

Are you a an organization looking for finding bugs on your website or app? Launch your bug hunt programs with prize pools for bug hunters to find all those little bugs possible!

About BLT

OWASP BLT (Bug Logging Tool) is a powerful tool designed to allow everyone who uses the internet to help improve it. With BLT, users can submit any type of issue they encounter, whether it’s a simple design flaw like a button being the wrong color, or a serious security vulnerability. Read more about BLT

Contributing

We welcome any contributions big or small. To start contributing, start with anything like opening an issue, pull request, suggesting a documentation etc.

If you want to see a complete Contribution Guide, check it out here.

Please make sure flutter analyze works before submitting the pull request.

• New to flutter?

  A few resources to get you started:

  • Lab: Write your first Flutter app
  • Cookbook: Useful Flutter samples

• Are you a designer?

  We got your back! If you want to help up with the UI mockups, design and prototyping refer the below links:

  • https://www.figma.com/file/uCd2HxU2Hvbcl01Gv2vUU1/Bug-Logging-Tool-(with-dark-theme)?type=design&node-id=0-1&mode=design&t=B9IH20nofZPfNpaM-0

Documentation

Check the API documentation for BLT below:

• Swagger API Documentations can be found at the root domain /swagger/
• Postman API Documentations: Postman Docs.

Resources

• Join the OWASP Slack Channel and ask questions at #project-blt
• Github activity can be seen in Slack #blt-github.

Other BLT Projects

Also check out other BLT projects!

• OWASP/BLT
• OWASP/BLT-Extension
• OWASP/BLT-Bacon
• OWASP/BLT-Action

License

The BLT-Flutter code is released under BSD 3-Clause "New" or "Revised" License.

Notes

• If you find a bug or have an improvement, use BLT to report it!
• For each new issue, create a new branch through Github on the issue page
• To take a github issue type a comment that says "assign to me" or /assign and it will assign it to you.

blt-flutter's Issues

error • The getter 'arrow_back_ios_new_rounded' isn't defined for the type 'Icons' • lib/pages/profile.dart:16:19 • undefined_getter

Unable to load asset: packages/login_fresh/assets/login_signup/icon_eye_close.png

Fix Invalid Image Data

Currently if flutter isn't unable to display a pfp on Leaderboard page it raises Invalid Image data and we have a green circle and it looks ugly.

Suggestion:
We can display a default pfp image or use a default material avatar icon in front of the green background.

Update the Search Bar to work correctly

Figma Link

Referral Page

Figma Link

Login Page

Figma Link

Github Actions for code coverage

Github actions for code coverage should be added in the repo

Refactor FutureBuilder

The current builder of the FutureBuilder of the PaginatedClass needs to be refactored.
It currently lacks the following things:

1. There are no checks for ConnectionState to check if the future is resolved or not.
2. There is no handler for the case of snapshot.hasError. As a result of this, if there's no internet connectivity and the user will open the app, then no appropriate error message is shown and the app may also crash in some cases.

Integrate Login Screen

(GSOC) Add and Fix Issue Detail in the APP

Figma Link

Integrate add an issue

• code first placeholder flutter
• finish designing front end
• get approved design
• code flutter for new design
• integrate to backend API

Terms Page

Figma Link

Company Detail

Figma Link

News Letter Page

Figma Link

Integrate search bar

Would like it to slide down when the button is pressed.

maybe something like this - https://github.com/NishantDesai1306/flutter_search_bar_transition

Add receive sharing intent for iOS

https://pub.dev/packages/receive_sharing_intent

(GSOC) Add LeaderBoard in the APP

Figma Link

Fix Account Button

Fix current no navigation on click of the account_circle button in the navbar.

Russian Language not showing up in app

Add Splash Page

There is no Splash Page currently, and the user is directly navigated to the Issues page. It will be good if we can add a Splash Page which depicts the branding.

Sign Up

Figma Link

(GSOC) Enhancing the UI for the login and signup pages

All the UI for login, signup, forget password and all other social authentication is requried

Correct Bottom Nav Implementation

The current implementation of the BottomNavigator is not correct.
Currently, the PaginatedClass holds the BottomNavigator and is itself acting as the body. Because, of this, we are unable to render any other Page in the UI except the PaginatedClass.
There should be a stateful widget that holds the child elements and the app bar and then changes its child Widget in the display based on the bottom nav item tapped.

Refactor out all login fresh code

We don't need all of the abstract methods here, lets make this a simple one page screen

Add and Fix Splash Screen in the APP

Figma Link

(GSOC) Add and Fix HomePage in the APP

Figma Link

Create app wireframes for all other screens in Figma file

See the Figma

Add Forgot Password Page in the APP

Figma Link

Update app icon with white background and fit within rounded square

Setup Bottom Nav Bar, as well as drawer on left that will work globally

Privacy Page

Figma Link

[Feature Request] Improve the page to page transitions

The page to page transition animations can be improved for a better UX. (Currently, the app uses only the default transitions when navigating from one route to another).
This can be done by adding support for a custom RouteGenerator

fix build for ios on codemagic

Report A Bug Page

Figma Link

Make login with email the only option and remove the others

Integrate new user signup with captcha in the app

Fix Issue List

Figma Link

User Details

Figma Link

Add Email Template Page in the APP (Redesign email to look better and show logo in dark mode.

Figma Link

Fix Company Scoreboard

Figma Link

All the user authentication APIs needs to be integrated

The app requires to integrate all the REST API for user authentication such that a user can login into app using Facebook, Google, Github and confirming the user if exist and getting access tokens for using issues and other APIS.

Fix Error Page

Figma Link

About Page

Figma Link

Start A Hunt

Figma Link

Covert Issue Card to a Stateless Widget

The Issue intro Card is something that will be used throughout the app. It will be good if we could convert it to a Stateless widget and use it as a Widget anywhere in the code. This will ensure the reusability of the code and will also make the code readable and clean.

Add ability to share a url from mobile to the app - Receive Sharing Intent

https://pub.dev/packages/receive_sharing_intent

(GSOC) Add all screenshots of all screens with their figma link.

Add and Fix Drawer in the APP

Figma Link: https://www.figma.com/file/s0xuxeU6O2guoWEfA9OElZ/Bugheist-Full-Design?node-id=487%3A172

Update the version for the current Flutter App as SVG files does not works in current version

Integrate leaderboard

• make leaderboard style like new design