Elijah/convertor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: resolve critical vulnerability V-002

Browse source 
Automatically generated security fix
This commit is contained in:
orbisai0security 2025-12-16 13:36:12 +00:00
parent 911587ea68
commit d73768645b
2 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/pages/deleteFile.tsx
View file

@ -2,6 +2,7 @@ import { unlink } from "node:fs/promises";
import { Elysia, t } from "elysia"; import { Elysia, t } from "elysia";
import { uploadsDir } from ".."; import { uploadsDir } from "..";
import db from "../db/db"; import db from "../db/db";
import { Jobs } from "../db/types";
import { WEBROOT } from "../helpers/env"; import { WEBROOT } from "../helpers/env";
import { userService } from "./user"; import { userService } from "./user";
@ -12,8 +13,9 @@ export const deleteFile = new Elysia().use(userService).post(
return redirect(`${WEBROOT}/`, 302); return redirect(`${WEBROOT}/`, 302);
} }
const existingJob = await db const existingJob = db
.query("SELECT * FROM jobs WHERE id = ? AND user_id = ?") .query("SELECT * FROM jobs WHERE id = ? AND user_id = ?")
.as(Jobs)
.get(jobId.value, user.id); .get(jobId.value, user.id);
if (!existingJob) { if (!existingJob) {

2
src/pages/deleteJob.tsx
View file

@ -29,7 +29,7 @@ export const deleteJob = new Elysia().use(userService).get(
}); });
// delete the job // delete the job
db.query("DELETE FROM jobs WHERE id = ?").run(job.id); db.query("DELETE FROM jobs WHERE id = ? AND user_id = ?").run(job.id, user.id);
return redirect(`${WEBROOT}/history`, 302); return redirect(`${WEBROOT}/history`, 302);
}, },
{ {