Disallow albumid keys on albums' uploads lists

This commit is contained in:
Bobby Wibowo 2020-05-16 22:42:08 +07:00
parent 51c5a81b18
commit ebf0037df5
No known key found for this signature in database
GPG Key ID: 51C3A1E1E22D26CF

View File

@ -830,9 +830,12 @@ self.list = async (req, res) => {
}
if (filters) {
let keywords = [
let keywords = []
if (req.params.id === undefined)
keywords = keywords.concat([
'albumid'
]
])
// Only allow filtering by 'ip' and 'user' keys when listing all uploads
if (all)