MrDiderot/Michess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

improve checks for update user api

Browse Source
This commit is contained in:
Nathaniel Tampus
2023-04-05 21:02:49 +08:00
parent d98efb39dc
commit 2fadce8ae1
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
server/src/controllers/auth.controller.ts
View File

@@ -239,6 +239,11 @@ export const updateUser = async (req: Request, res: Response) => {
return; return;
} }
if (!req.body.name && !req.body.email && !req.body.password) {
res.status(400).end();
return;
}
const name = xss(req.body.name || req.session.user.name); const name = xss(req.body.name || req.session.user.name);
const pattern = /^[A-Za-z0-9]+$/; const pattern = /^[A-Za-z0-9]+$/;
if (!pattern.test(name)) { if (!pattern.test(name)) {