yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-11-18 02:58:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Sanitize /upload/search/:q route (#8658)

Browse Source 
Signed-off-by: Convly <jean-sebastien.herbaux@epitech.eu>
This commit is contained in:
Jean-Sébastien Herbaux 2020-11-16 12:55:35 +01:00 committed by GitHub
parent d3c249c876
commit 4a33829f11
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
packages/strapi-plugin-upload/controllers/Upload.js
View File

@ -8,6 +8,7 @@
const _ = require('lodash'); const _ = require('lodash');
const apiUploadController = require('./upload/api'); const apiUploadController = require('./upload/api');
const adminUploadController = require('./upload/admin'); const adminUploadController = require('./upload/admin');
const { sanitizeEntity } = require('strapi-utils');
const resolveController = ctx => { const resolveController = ctx => {
const { const {
@ -66,10 +67,12 @@ module.exports = {
async search(ctx) { async search(ctx) {
const { id } = ctx.params; const { id } = ctx.params;
const model = strapi.getModel('file', 'upload');
ctx.body = await strapi.query('file', 'upload').custom(searchQueries)({ const entries = await strapi.query('file', 'upload').custom(searchQueries)({
id, id,
}); });
ctx.body = sanitizeEntity(entries, { model });
}, },
}; };