mirror of
https://github.com/iv-org/invidious.git
synced 2024-12-22 08:09:51 +05:30
validate video id
This commit is contained in:
parent
27bf4d02a1
commit
8c0efb3ea9
@ -94,7 +94,7 @@ module Invidious::Routes::API::V1::Authenticated
|
||||
user = env.get("user").as(User)
|
||||
|
||||
id = env.params.url["id"]?.try &.as(String)
|
||||
if !id
|
||||
if !id.match(/[a-zA-Z0-9_-]{11}/)
|
||||
return error_json(400, "Invalid video id.")
|
||||
end
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user