ProjectSegfault/invidious-experimenting
4
0
Fork 0
forked from midou/invidious
Code Pull Requests Activity

validate video id

Browse Source
This commit is contained in:
Brahim Hadriche 2023-03-02 14:45:26 -05:00
parent 27bf4d02a1
commit 8c0efb3ea9
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/invidious/routes/api/v1/authenticated.cr
View File

@ -94,7 +94,7 @@ module Invidious::Routes::API::V1::Authenticated
user = env.get("user").as(User)
id = env.params.url["id"]?.try &.as(String)
if !id
if !id.match(/[a-zA-Z0-9_-]{11}/)
return error_json(400, "Invalid video id.")
end