Mirrors/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-02-20 13:53:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update settings update endpoint to validate allowedOrigins is array

Browse Source
This commit is contained in:
advplyr
2025-10-10 18:00:37 -05:00
parent f0acbb2e81
commit feed827223
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
server/controllers/MiscController.js
View File

@@ -142,6 +142,9 @@ class MiscController {
Logger.warn('Cannot disable iframe when ALLOW_IFRAME is enabled in environment')
return res.status(400).send('Cannot disable iframe when ALLOW_IFRAME is enabled in environment')
}
if (settingsUpdate.allowedOrigins && !Array.isArray(settingsUpdate.allowedOrigins)) {
return res.status(400).send('allowedOrigins must be an array')
}
const madeUpdates = Database.serverSettings.update(settingsUpdate)
if (madeUpdates) {