iv-org-mirror/invidious-copy-2023-06-08
1
0
Fork 0
mirror of https://gitea.invidious.io/iv-org/invidious-copy-2023-06-08.git synced 2024-08-15 00:53:38 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix input validation

Browse source
This commit is contained in:
Brahim Hadriche 2023-03-07 13:50:02 -05:00
parent a5cc66e060
commit 0b17f68eba
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/invidious/routes/api/v1/authenticated.cr
View file

@ -82,7 +82,7 @@ module Invidious::Routes::API::V1::Authenticated
end end
id = env.params.url["id"] id = env.params.url["id"]
if !id.match(/[a-zA-Z0-9_-]{11}/) if !id.match(/^[a-zA-Z0-9_-]{11}$/)
return error_json(400, "Invalid video id.") return error_json(400, "Invalid video id.")
end end
@ -98,7 +98,7 @@ module Invidious::Routes::API::V1::Authenticated
end end
id = env.params.url["id"] id = env.params.url["id"]
if !id.match(/[a-zA-Z0-9_-]{11}/) if !id.match(/^[a-zA-Z0-9_-]{11}$/)
return error_json(400, "Invalid video id.") return error_json(400, "Invalid video id.")
end end