Commit7cc042a

committed

fix: block global API token from /user

1 parentdd029c3 commit7cc042aCopy full SHA for 7cc042a

File tree

-1

lines changed

-1

lines changed

Lines changed: 4 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -15,7 +15,10 @@ export function isRouteDisabled(options: Pick<Options, "req">) {`
`15`	`15`	`consturl=options.req.originalUrl.toLowerCase();`
`16`	`16`	`constrequestMethod=options.req.methodasMethod;`
`17`	`17`
`18`		`-constroute=DISABLED_API_TOKEN_ROUTES.find(([r])=>url.endsWith(r));`
	`18`	`+constroute=DISABLED_API_TOKEN_ROUTES.find(([pathname])=>{`
	`19`	`+consturlPathname=newURL(url,"https://example.com").pathname.toLowerCase();`
	`20`	`+returnurlPathname.endsWith(pathname.toLowerCase());`
	`21`	`+});`
`19`	`22`
`20`	`23`	`if(route){`
`21`	`24`	`const[,methods]=route;`

Comments

(0)