Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only allow number IDs to the user handlers

Browse Source
This commit is contained in:
luukas 2022-05-18 22:54:44 +03:00
parent 2bc26ef3fd
commit 4c397ff454
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/classes/web/routes/api/api_handlers.py
View File

@ -49,7 +49,7 @@ def api_handlers(handler_args):
handler_args,
),
(
r"/api/v2/users/([a-z0-9_]+)/?",
r"/api/v2/users/([0-9]+)/?",
ApiUsersUserIndexHandler,
handler_args,
),
@ -59,7 +59,7 @@ def api_handlers(handler_args):
handler_args,
),
(
r"/api/v2/users/([a-z0-9_]+)/pfp/?",
r"/api/v2/users/([0-9]+)/pfp/?",
ApiUsersUserPfpHandler,
handler_args,
),
@ -69,7 +69,7 @@ def api_handlers(handler_args):
handler_args,
),
(
r"/api/v2/users/([a-z0-9_]+)/public/?",
r"/api/v2/users/([0-9]+)/public/?",
ApiUsersUserPublicHandler,
handler_args,
),

1
app/classes/web/routes/api/users/index.py
View File

@ -134,6 +134,7 @@ class ApiUsersIndexHandler(BaseApiHandler):
)
permissions_mask = "".join(permissions_mask)
# TODO: do this in the most efficient way
user_id = self.controller.users.add_user(
username,
password,