TCS AI.CloudFull-Stack Web Security, SEO & AI APIs

Mission-Critical Banking LLM & COBOL Modernization Architect • ₹24 LPA – ₹55 LPA (Digital / Prime Architect)

Enterprise Web & AI ModernizationWith-AI Coding Allowed

Codebase 1: Full-Stack Web + AI SaaS Audit

Audit a live AI Storefront (HTML/CSS/JS frontend + Node HTTP backend). Catch hardcoded secrets & /api/debug-env leaks, reflected XSS, SSRF preview risk, robots.txt/noindex SEO blocks, CLS shifts, N+1 loops, and uncached AI endpoints.

System Design Perspective

Full-Stack Web Security, SEO & AI APIs

Before You Start (TCS AI.Cloud)

Run Codebase 1 locally (`node server.js`) and find the hardcoded database credentials, XSS injection, and crawler blockers.

Download & Run LocallyDownload .zip

Runtime: Node.js 18+ (Zero npm install required)

unzip buggy-ai-storefront.zip
cd buggy-ai-storefront
node server.js
# Then open http://localhost:3100 in Chrome/Edge and audit UI + server!

Bloomberg / Google / Meta AI-Assisted Multi-File Track

const CONFIG = {
  openaiApiKey: process.env.OPENAI_API_KEY || 'sk-live-HARDCODED-SECRET-987654',
  dbUrl: process.env.DATABASE_URL || 'postgres://admin:SuperSecretPass123@10.0.4.12:5432/store_prod',
};

if (pathname === '/api/debug-env') {
  res.end(JSON.stringify({ status: 'debug', env: CONFIG })); // LEAK!
}

if (pathname === '/api/preview') {
  const targetUrl = parsed.query.url || ''; // Unvalidated SSRF risk!
}

if (pathname === '/api/ai-summary') {
  uncachedAiRequestLog.push({ ts: Date.now(), prompt }); // Memory leak + zero rate limit/cache!
}