Ryan/drop
1
0
Fork 0
mirror of https://github.com/Drop-OSS/drop.git synced 2025-11-12 07:42:40 +10:00
Code Issues Packages Projects Releases Wiki Activity

fix: info leak in screenshots api

Browse Source
This commit is contained in:
Huskydog9988
2025-05-27 15:14:50 -04:00
parent 4b009f1aca
commit 0816d2ab3e
3 changed files with 30 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
server/api/v1/screenshots/[id]/index.delete.ts
View File

@ -16,12 +16,11 @@ export default defineEventHandler(async (h3) => {
const result = await screenshotManager.get(screenshotId);
if (!result)
throw createError({
statusCode: 400,
statusMessage: "Incorrect screenshot ID",
statusCode: 404,
});
else if (result.userId !== userId)
throw createError({
statusCode: 403,
statusCode: 404,
});
await screenshotManager.delete(screenshotId);