Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-05-07 10:06:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

only allow valid types for doExport

Browse Source 
backport of
This commit is contained in:
Barış Soner Uşaklı
2023-07-19 17:51:13 -04:00
parent e9ec1969b5
commit 354c9c2cc1
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/socket.io/user/profile.js
View File

@@ -64,6 +64,10 @@ module.exports = function (SocketUser) {
};
async function doExport(socket, data, type) {
const validTypes = ['profile', 'posts', 'uploads'];
if (!validTypes.includes(type)) {
throw new Error('[[error:invalid-data]]');
}
if (!socket.uid) {
throw new Error('[[error:invalid-uid]]');
}