yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-11-02 19:04:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

Sanitize /upload/search/:q route (#8658)

Browse Source 
Signed-off-by: Convly <jean-sebastien.herbaux@epitech.eu>
This commit is contained in:
Jean-Sébastien Herbaux 2020-11-16 12:55:35 +01:00 committed by GitHub
parent d3c249c876
commit 4a33829f11
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
packages/strapi-plugin-upload/controllers/Upload.js
View File

@ -8,6 +8,7 @@
const _ = require('lodash');
const apiUploadController = require('./upload/api');
const adminUploadController = require('./upload/admin');
const { sanitizeEntity } = require('strapi-utils');
const resolveController = ctx => {
const {
@ -66,10 +67,12 @@ module.exports = {
async search(ctx) {
const { id } = ctx.params;
ctx.body = await strapi.query('file', 'upload').custom(searchQueries)({
const model = strapi.getModel('file', 'upload');
const entries = await strapi.query('file', 'upload').custom(searchQueries)({
id,
});
ctx.body = sanitizeEntity(entries, { model });
},
};