mirror of
https://github.com/BobbyWibowo/lolisafe.git
synced 2024-12-14 00:16:21 +00:00
36763c2a77
Replaced all instances of DB .whereRaw with their much safer equivalent methods. All previous usages of .whereRaw were vulnerable to SQL injections, cause we were passing the data directly. Fortunately, they were only used in API routes that required staff (moderators included) accounts. --- Updated dependency: helmet: 3.21.1 -> 3.21.2 |
||
|---|---|---|
| .. | ||
| albumsController.js | ||
| authController.js | ||
| pathsController.js | ||
| permissionController.js | ||
| tokenController.js | ||
| uploadController.js | ||
| utilsController.js | ||