DatseMultimediaSites
/
Sharkey
mirror of https://activitypub.software/TransFem-org/Sharkey.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

file - if 'name' param given, validate

This commit is contained in:
otofune 2017-11-07 09:18:40 +09:00
parent 8e62cc1efd
commit a7762aea4f
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/file/server.ts
View File

@ -96,6 +96,12 @@ async function sendFileById (req: express.Request, res: express.Response): Promi
const fileId = new mongodb.ObjectID(req.params.id); const fileId = new mongodb.ObjectID(req.params.id);
const file = await DriveFile.findOne({ _id: fileId }); const file = await DriveFile.findOne({ _id: fileId });
// validate name
if (req.params.name !== undefined && req.params.name !== file.metadata.name) {
res.status(404).send('there is no file has given name');
return;
}
if (file == null) { if (file == null) {
res.status(404).sendFile(`${__dirname}/assets/dummy.png`); res.status(404).sendFile(`${__dirname}/assets/dummy.png`);
return; return;