dandri/server
1
0
Fork 0
mirror of https://github.com/spacebarchat/server.git synced 2026-03-29 16:19:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

CDN: use file contents for hashes, the fuck

Browse Source
This commit is contained in:
Rory&
2026-03-19 08:18:16 +01:00
parent 7a81d07ad3
commit b839c0a2c4
14 changed files with 14 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/cdn/routes/app-assets.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/app-icons.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/avatars.ts
View File

@@ -42,7 +42,7 @@ router.post("/:user_id", multer.single("file"), async (req: Request, res: Respon
const { buffer, size } = req.file;
const { user_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/banners.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/channel-icons.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/discover-splashes.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/discovery-splashes.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/emojis.ts
View File

@@ -43,7 +43,7 @@ router.post("/:emoji_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { emoji_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/guild-profiles.ts
View File

@@ -42,7 +42,7 @@ router.post("/", multer.single("file"), async (req: Request, res: Response) => {
const { buffer, size } = req.file;
const { guild_id, user_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/icons.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/splashes.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/stickers.ts
View File

@@ -43,7 +43,7 @@ router.post("/:sticker_id", multer.single("file"), async (req: Request, res: Res
const { buffer, size } = req.file;
const { sticker_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/routes/team-icons.ts
View File

@@ -43,7 +43,7 @@ router.post("/:guild_id", multer.single("file"), async (req: Request, res: Respo
const { buffer, size } = req.file;
const { guild_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");

2
src/cdn/util/basicCrdFileRouter.ts
View File

@@ -51,7 +51,7 @@ export function createBasicCrdFileRouter(opts: BasicCrdFileRouterOptions) {
const { buffer, size } = req.file;
const { user_id } = req.params as { [key: string]: string };
let hash = crypto.createHash("md5").update(Snowflake.generate()).digest("hex");
let hash = crypto.createHash("md5").update(buffer).digest("hex");
const type = await fileTypeFromBuffer(buffer);
if (!type || !ALLOWED_MIME_TYPES.includes(type.mime)) throw new HTTPError("Invalid file type");