From f8fd4c72e7c2b6e5bc80685b50d72c8555e16734 Mon Sep 17 00:00:00 2001 From: Miroslav Pejic Date: Mon, 5 Aug 2024 08:16:16 +0200 Subject: [PATCH] [mirotalksfu] - add additional fileName validation --- app/src/Server.js | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/app/src/Server.js b/app/src/Server.js index 4fd6d2d8..8306d71a 100644 --- a/app/src/Server.js +++ b/app/src/Server.js @@ -658,7 +658,12 @@ function startServer() { return res.status(400).send('Filename not provided'); } - if (!isValidVideo(fileName)) { + // Rec_test_2024_08_03_16_17_01.webm + + const parts = fileName.split('_'); + const roomId = parts[1]; + + if (!isValidVideo(fileName) || !roomList.has(roomId)) { return res.status(400).send('Invalid file name'); }