Lucas/PoorBooru
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

api: use a quoted regex for media_id validation

Browse Source
This commit is contained in:
Lucas 2023-02-19 09:55:28 +00:00
parent 3a41ea6d0b
commit af1cac6d3f
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/PoorBooru/API/V0.pm
View File

@ -22,6 +22,7 @@ use constant {
}; };
my $TAG_NAME_RE = qr/^[0-9]*[A-Z_a-z][0-9A-Z_a-z]*$/; my $TAG_NAME_RE = qr/^[0-9]*[A-Z_a-z][0-9A-Z_a-z]*$/;
my $NUMERIC_ID_RE = qr/^[1-9][0-9]*$/;
sub mkpager ($) sub mkpager ($)
{ {
@ -87,7 +88,7 @@ get "/tag/:tag_id_or_name" => sub {
get "/media" => sub { get "/media" => sub {
my $page = query_parameters->get("page") // 1; my $page = query_parameters->get("page") // 1;
send_error("Invalid page number", 400) if $page !~ /^[1-9][0-9]*$/; send_error("Invalid page number", 400) if $page !~ $NUMERIC_ID_RE;
my $paged_media = schema("default")->resultset("Media") my $paged_media = schema("default")->resultset("Media")
->search({}, { order_by => "upload_date", rows => ROWS_PER_PAGE }) ->search({}, { order_by => "upload_date", rows => ROWS_PER_PAGE })