groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-12-06 03:49:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update settings update endpoint to validate allowedOrigins is array
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Details
Build and Push Docker Image / build (push) Has been cancelled
Details
Integration Test / build and test (push) Has been cancelled
Details
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Details

Browse source
This commit is contained in:
advplyr 2025-10-10 18:00:37 -05:00
parent f0acbb2e81
commit feed827223
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
server/controllers/MiscController.js
View file

@ -142,6 +142,9 @@ class MiscController {
Logger.warn('Cannot disable iframe when ALLOW_IFRAME is enabled in environment')
return res.status(400).send('Cannot disable iframe when ALLOW_IFRAME is enabled in environment')
}
if (settingsUpdate.allowedOrigins && !Array.isArray(settingsUpdate.allowedOrigins)) {
return res.status(400).send('allowedOrigins must be an array')
}
const madeUpdates = Database.serverSettings.update(settingsUpdate)
if (madeUpdates) {