melosh/mal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Validate playback route parameters

Browse Source
This commit is contained in:
mkelvers
2026-06-20 18:29:32 +02:00
committed by Milas Holsting
parent 1828306c27
commit 98f6b1c6cf
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
internal/playback/handler/handler.go
View File

@@ -45,7 +45,11 @@ func (h *PlaybackHandler) Register(r *gin.Engine) {
} }
func (h *PlaybackHandler) HandleWatchPage(c *gin.Context) { func (h *PlaybackHandler) HandleWatchPage(c *gin.Context) {
id, _ := strconv.Atoi(c.Param("id")) id, err := strconv.Atoi(c.Param("id"))
if err != nil || id <= 0 {
server.RespondHTMLOrJSONError(c, http.StatusBadRequest, "invalid anime id")
return
}
ep := c.DefaultQuery("ep", "1") ep := c.DefaultQuery("ep", "1")
mode := c.DefaultQuery("mode", "sub") mode := c.DefaultQuery("mode", "sub")
@@ -126,7 +130,11 @@ func (h *PlaybackHandler) HandleEpisodeData(c *gin.Context) {
// Try to resolve a title for this episode from the episode list. // Try to resolve a title for this episode from the episode list.
episodeTitle := "" episodeTitle := ""
epNum, _ := strconv.Atoi(episode) epNum, err := strconv.Atoi(episode)
if err != nil {
server.RespondHTMLOrJSONError(c, http.StatusBadRequest, "invalid episode")
return
}
for _, e := range watchData.Episodes { for _, e := range watchData.Episodes {
if e.Number == epNum { if e.Number == epNum {
episodeTitle = e.Title episodeTitle = e.Title