forks
/
amnezia-wg-easy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fixup: Prototype-polluting assignment (medium)

This commit is contained in:
Philip H. 2023-12-03 11:46:13 +00:00 committed by GitHub
parent 9408b732a2
commit 2a775d4bf7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
src/lib/Server.js
View File

@ -118,9 +118,6 @@ module.exports = class Server {
const svg = await WireGuard.getClientQRCodeSVG({ clientId }); const svg = await WireGuard.getClientQRCodeSVG({ clientId });
res.header('Content-Type', 'image/svg+xml'); res.header('Content-Type', 'image/svg+xml');
res.send(svg); res.send(svg);
if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
res.end(403);
}
})) }))
.get('/api/wireguard/client/:clientId/configuration', Util.promisify(async (req, res) => { .get('/api/wireguard/client/:clientId/configuration', Util.promisify(async (req, res) => {
const { clientId } = req.params; const { clientId } = req.params;
@ -134,9 +131,6 @@ module.exports = class Server {
res.header('Content-Disposition', `attachment; filename="${configName || clientId}.conf"`); res.header('Content-Disposition', `attachment; filename="${configName || clientId}.conf"`);
res.header('Content-Type', 'text/plain'); res.header('Content-Type', 'text/plain');
res.send(config); res.send(config);
if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
res.end(403);
}
})) }))
.post('/api/wireguard/client', Util.promisify(async (req) => { .post('/api/wireguard/client', Util.promisify(async (req) => {
const { name } = req.body; const { name } = req.body;
@ -146,21 +140,33 @@ module.exports = class Server {
const { clientId } = req.params; const { clientId } = req.params;
return WireGuard.deleteClient({ clientId }); return WireGuard.deleteClient({ clientId });
})) }))
.post('/api/wireguard/client/:clientId/enable', Util.promisify(async (req) => { .post('/api/wireguard/client/:clientId/enable', Util.promisify(async (req, res) => {
const { clientId } = req.params; const { clientId } = req.params;
if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
res.end(403);
}
return WireGuard.enableClient({ clientId }); return WireGuard.enableClient({ clientId });
})) }))
.post('/api/wireguard/client/:clientId/disable', Util.promisify(async (req) => { .post('/api/wireguard/client/:clientId/disable', Util.promisify(async (req, res) => {
const { clientId } = req.params; const { clientId } = req.params;
if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
res.end(403);
}
return WireGuard.disableClient({ clientId }); return WireGuard.disableClient({ clientId });
})) }))
.put('/api/wireguard/client/:clientId/name', Util.promisify(async (req) => { .put('/api/wireguard/client/:clientId/name', Util.promisify(async (req, res) => {
const { clientId } = req.params; const { clientId } = req.params;
if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
res.end(403);
}
const { name } = req.body; const { name } = req.body;
return WireGuard.updateClientName({ clientId, name }); return WireGuard.updateClientName({ clientId, name });
})) }))
.put('/api/wireguard/client/:clientId/address', Util.promisify(async (req) => { .put('/api/wireguard/client/:clientId/address', Util.promisify(async (req, res) => {
const { clientId } = req.params; const { clientId } = req.params;
if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
res.end(403);
}
const { address } = req.body; const { address } = req.body;
return WireGuard.updateClientAddress({ clientId, address }); return WireGuard.updateClientAddress({ clientId, address });
})) }))