limepotato/jormungandr-bite
1
0
Fork 0
mirror of https://iceshrimp.dev/limepotato/jormungandr-bite.git synced 2024-11-15 06:27:34 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

[API] Fix: Validate file_id

Browse source
This commit is contained in:
syuilo 2017-02-12 06:01:31 +09:00
parent 330a57977e
commit ba14a1cb4a
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/api/endpoints/drive/files/update.js
View file

@ -26,6 +26,11 @@ module.exports = (params, user) =>
return rej('file_id is required');
}
// Validate id
if (!mongo.ObjectID.isValid(fileId)) {
return rej('incorrect file_id');
}
const file = await DriveFile
.findOne({
_id: new mongo.ObjectID(fileId),