Fix input validation

2 years ago · 0b17f68eba
parent a5cc66e060
commit 0b17f68eba
1 changed files with 2 additions and 2 deletions
--- a/src/invidious/routes/api/v1/authenticated.cr
+++ b/src/invidious/routes/api/v1/authenticated.cr
@ -82,7 +82,7 @@ module Invidious::Routes::API::V1::Authenticated
    end

    id = env.params.url["id"]
-    if !id.match(/[a-zA-Z0-9_-]{11}/)
+    if !id.match(/^[a-zA-Z0-9_-]{11}$/)
      return error_json(400, "Invalid video id.")
    end

@ -98,7 +98,7 @@ module Invidious::Routes::API::V1::Authenticated
    end

    id = env.params.url["id"]
-    if !id.match(/[a-zA-Z0-9_-]{11}/)
+    if !id.match(/^[a-zA-Z0-9_-]{11}$/)
      return error_json(400, "Invalid video id.")
    end