Upstream/invidious
1
0
Fork 0
mirror of https://github.com/iv-org/invidious.git synced 2024-06-30 11:14:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix id check

Browse Source
This commit is contained in:
Brahim Hadriche 2023-03-02 16:11:50 -05:00
parent 38f6d08be6
commit a5cc66e060
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/invidious/routes/api/v1/authenticated.cr
View File

@ -81,7 +81,7 @@ module Invidious::Routes::API::V1::Authenticated
return error_json(409, "Watch history is disabled in preferences.")
end
id = env.params.url["id"]?.try &.as(String)
id = env.params.url["id"]
if !id.match(/[a-zA-Z0-9_-]{11}/)
return error_json(400, "Invalid video id.")
end
@ -97,7 +97,7 @@ module Invidious::Routes::API::V1::Authenticated
return error_json(409, "Watch history is disabled in preferences.")
end
id = env.params.url["id"]?.try &.as(String)
id = env.params.url["id"]
if !id.match(/[a-zA-Z0-9_-]{11}/)
return error_json(400, "Invalid video id.")
end