coop-cloud-chaos-patchs/outline
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix: Improve validation on documents.import endpoint

Browse Source
This commit is contained in:
Tom Moor
2020-11-26 20:29:45 -08:00
parent 56d5f048f9
commit 8bddc1b338
2 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
server/api/documents.js
View File

@ -815,7 +815,12 @@ router.post("documents.unstar", auth(), async (ctx) => {
router.post("documents.create", auth(), createDocumentFromContext);
router.post("documents.import", auth(), async (ctx) => {
if (!ctx.is("multipart/form-data")) {
throw new InvalidRequestError("Request type must be multipart/form-data");
}
const file: any = Object.values(ctx.request.files)[0];
ctx.assertPresent(file, "file is required");
const user = ctx.state.user;
authorize(user, "create", Document);