Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

youtube-dl refactor #956

Merged
merged 26 commits into from
Nov 27, 2023
Merged

youtube-dl refactor #956

merged 26 commits into from
Nov 27, 2023

Conversation

Tzahi12345
Copy link
Owner

@Tzahi12345 Tzahi12345 commented Jun 6, 2023

backend/subscriptions.js Fixed Show fixed Hide fixed
backend/subscriptions.js Fixed Show fixed Hide fixed
@@ -1305,6 +1289,36 @@
});
});

app.post('/api/checkSubscription', optionalJwt, async (req, res) => {

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
Comment on lines +1292 to +1300
app.post('/api/checkSubscription', optionalJwt, async (req, res) => {
let sub_id = req.body.sub_id;
let user_uid = req.isAuthenticated() ? req.user.uid : null;

const success = subscriptions_api.getVideosForSub(sub_id, user_uid);
res.send({
success: success
});
});

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
});
});

app.post('/api/cancelCheckSubscription', optionalJwt, async (req, res) => {

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
Comment on lines +1302 to +1310
app.post('/api/cancelCheckSubscription', optionalJwt, async (req, res) => {
let sub_id = req.body.sub_id;
let user_uid = req.isAuthenticated() ? req.user.uid : null;

const success = subscriptions_api.cancelCheckSubscription(sub_id, user_uid);
res.send({
success: success
});
});

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
});
});

app.post('/api/cancelSubscriptionCheck', optionalJwt, async (req, res) => {

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
Comment on lines +1312 to +1320
app.post('/api/cancelSubscriptionCheck', optionalJwt, async (req, res) => {
let sub_id = req.body.sub_id;
let user_uid = req.isAuthenticated() ? req.user.uid : null;

const success = subscriptions_api.getVideosForSub(sub_id, user_uid);
res.send({
success: success
});
});

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
@Tzahi12345 Tzahi12345 changed the title youtube-dl refactor (part 1) youtube-dl refactor Nov 26, 2023
@martadinata666
Copy link
Collaborator

I saw the docker change, as the default user is not root, I think the nvm and it node installation path should be somewhere accessed to all like /usr/local/nvm rather than root path.

@Tzahi12345
Copy link
Owner Author

I saw the docker change, as the default user is not root, I think the nvm and it node installation path should be somewhere accessed to all like /usr/local/nvm rather than root path.

Yeah good point. It's still WIP as I'm wrestling with git but I'll make that change!

@Tzahi12345 Tzahi12345 merged commit 0565cf2 into master Nov 27, 2023
5 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants