feat: Implement secure static file serving with path traversal protection and XSS prevention for template titles.

This commit is contained in:
syntaxbullet
2026-01-07 12:51:08 +01:00
parent 2a1c4e65ae
commit 894cad91a8
7 changed files with 98 additions and 19 deletions

View File

@@ -7,7 +7,7 @@ describe("Database Indexes", () => {
SELECT indexname FROM pg_indexes
WHERE tablename = 'users'
`;
const indexNames = result.map((r: any) => r.indexname);
const indexNames = (result as unknown as { indexname: string }[]).map(r => r.indexname);
expect(indexNames).toContain("users_balance_idx");
expect(indexNames).toContain("users_level_xp_idx");
});
@@ -17,7 +17,7 @@ describe("Database Indexes", () => {
SELECT indexname FROM pg_indexes
WHERE tablename = 'transactions'
`;
const indexNames = result.map((r: any) => r.indexname);
const indexNames = (result as unknown as { indexname: string }[]).map(r => r.indexname);
expect(indexNames).toContain("transactions_created_at_idx");
});
@@ -26,7 +26,7 @@ describe("Database Indexes", () => {
SELECT indexname FROM pg_indexes
WHERE tablename = 'moderation_cases'
`;
const indexNames = result.map((r: any) => r.indexname);
const indexNames = (result as unknown as { indexname: string }[]).map(r => r.indexname);
expect(indexNames).toContain("moderation_cases_user_id_idx");
expect(indexNames).toContain("moderation_cases_case_id_idx");
});
@@ -36,7 +36,7 @@ describe("Database Indexes", () => {
SELECT indexname FROM pg_indexes
WHERE tablename = 'user_timers'
`;
const indexNames = result.map((r: any) => r.indexname);
const indexNames = (result as unknown as { indexname: string }[]).map(r => r.indexname);
expect(indexNames).toContain("user_timers_expires_at_idx");
expect(indexNames).toContain("user_timers_lookup_idx");
});