Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-02-25 16:34:06 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

🎨 内核 API 校验 ID 格式 Fix https://github.com/siyuan-note/siyuan/issues/7228

Browse source
This commit is contained in:
Liang Ding 2023-02-02 11:06:29 +08:00
parent b321185248
commit f37678a98b
No known key found for this signature in database
GPG key ID: 136F30F901A2231D
8 changed files with 98 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

21
kernel/api/block_op.go
View file

@ -40,6 +40,9 @@ func appendBlock(c *gin.Context) {
data := arg["data"].(string)
dataType := arg["dataType"].(string)
parentID := arg["parentID"].(string)
if util.InvalidIDPattern(parentID, ret) {
return
}
if "markdown" == dataType {
luteEngine := model.NewLute()
data = dataBlockDOM(data, luteEngine)
@ -82,6 +85,9 @@ func prependBlock(c *gin.Context) {
data := arg["data"].(string)
dataType := arg["dataType"].(string)
parentID := arg["parentID"].(string)
if util.InvalidIDPattern(parentID, ret) {
return
}
if "markdown" == dataType {
luteEngine := model.NewLute()
data = dataBlockDOM(data, luteEngine)
@ -126,12 +132,21 @@ func insertBlock(c *gin.Context) {
var parentID, previousID, nextID string
if nil != arg["parentID"] {
parentID = arg["parentID"].(string)
if util.InvalidIDPattern(parentID, ret) {
return
}
}
if nil != arg["previousID"] {
previousID = arg["previousID"].(string)
if util.InvalidIDPattern(previousID, ret) {
return
}
}
if nil != arg["nextID"] {
nextID = arg["nextID"].(string)
if util.InvalidIDPattern(nextID, ret) {
return
}
}
if "markdown" == dataType {
@ -178,6 +193,9 @@ func updateBlock(c *gin.Context) {
data := arg["data"].(string)
dataType := arg["dataType"].(string)
id := arg["id"].(string)
if util.InvalidIDPattern(id, ret) {
return
}
luteEngine := model.NewLute()
if "markdown" == dataType {
@ -264,6 +282,9 @@ func deleteBlock(c *gin.Context) {
}
id := arg["id"].(string)
if util.InvalidIDPattern(id, ret) {
return
}
transactions := []*model.Transaction{
{