Preview this drop
- 0:00 The intended changeOne sentence: checkout should trust the price the server already computed.
- 0:08 The hunk that movedThe reducer that summed item.price * qty is gone. total now comes from body.total.
- 0:16 The riskA client can post any total, including zero or a negative, and the route marks the order paid.
- 0:24 The checkSend the old cart fixture and assert the stored total matches the server sum, not the body.
No daily video for this drop yet. The in and out lines above are the preview.