Fix input validation

pull/3654/head
Brahim Hadriche 2 years ago
parent a5cc66e060
commit 0b17f68eba

@ -82,7 +82,7 @@ module Invidious::Routes::API::V1::Authenticated
end end
id = env.params.url["id"] id = env.params.url["id"]
if !id.match(/[a-zA-Z0-9_-]{11}/) if !id.match(/^[a-zA-Z0-9_-]{11}$/)
return error_json(400, "Invalid video id.") return error_json(400, "Invalid video id.")
end end
@ -98,7 +98,7 @@ module Invidious::Routes::API::V1::Authenticated
end end
id = env.params.url["id"] id = env.params.url["id"]
if !id.match(/[a-zA-Z0-9_-]{11}/) if !id.match(/^[a-zA-Z0-9_-]{11}$/)
return error_json(400, "Invalid video id.") return error_json(400, "Invalid video id.")
end end

Loading…
Cancel
Save