Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 08:36:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: restored sanity checks for post move socket calls

Browse Source
This commit is contained in:
Julian Lam
2021-01-18 15:47:15 -05:00
parent 966c4117ec
commit d85ad10d34
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/socket.io/posts/move.js
View File

@@ -4,13 +4,27 @@ const api = require('../../api');
const sockets = require('..');
module.exports = function (SocketPosts) {
function moveChecks(socket, typeCheck, data) {
if (!socket.uid) {
throw new Error('[[error:not-logged-in]]');
}
if (!data || !typeCheck || !data.tid) {
throw new Error('[[error:invalid-data]]');
}
}
SocketPosts.movePost = async function (socket, data) {
sockets.warnDeprecated(socket, 'PUT /api/v3/posts/:pid/move');
moveChecks(socket, isFinite(data.pid), data);
await api.posts.move(socket, data);
};
SocketPosts.movePosts = async function (socket, data) {
sockets.warnDeprecated(socket, 'PUT /api/v3/posts/:pid/move');
moveChecks(socket, !Array.isArray(data.pids), data);
await Promise.all(data.pids.map(async pid => api.posts.move(socket, {
tid: data.tid,
pid,