mirror of
https://github.com/iv-org/invidious.git
synced 2024-10-01 01:25:56 -04:00
validate video id
This commit is contained in:
parent
27bf4d02a1
commit
8c0efb3ea9
@ -94,7 +94,7 @@ module Invidious::Routes::API::V1::Authenticated
|
|||||||
user = env.get("user").as(User)
|
user = env.get("user").as(User)
|
||||||
|
|
||||||
id = env.params.url["id"]?.try &.as(String)
|
id = env.params.url["id"]?.try &.as(String)
|
||||||
if !id
|
if !id.match(/[a-zA-Z0-9_-]{11}/)
|
||||||
return error_json(400, "Invalid video id.")
|
return error_json(400, "Invalid video id.")
|
||||||
end
|
end
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user