dillenberg/ECC
1
0
Fork 0
mirror of https://github.com/Jeuners/ECC.git synced 2026-09-16 18:16:10 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: harden plan canvas code scanning alerts

Browse source
This commit is contained in:
Haley Chen 2026-07-22 16:28:07 -04:00
parent b6652335d3
commit b6fe5a71e1
3 changed files with 60 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scripts/lib/plan-canvas/server.js
View file

@ -248,9 +248,11 @@ function createPlanCanvasServer({
}
if (req.method === 'GET' && pathname === '/api/await') {
const keyParam = url.searchParams.get('key');
const file = url.searchParams.get('file');
if (!file) return sendJson(res, 400, { error: 'file query parameter is required' });
const session = store.findByFile(file);
if (keyParam && !/^[a-f0-9]{12}$/.test(keyParam)) return sendJson(res, 400, { error: 'invalid session key' });
if (!keyParam && !file) return sendJson(res, 400, { error: 'key or file query parameter is required' });
const session = keyParam ? store.get(keyParam) : store.findByFile(file);
if (!session) return sendJson(res, 200, { status: 'missing' });
const key = session.key;
const timeoutRaw = url.searchParams.get('timeoutMs');