chore: validate filename for deletion

This commit is contained in:
izzy 2025-12-03 12:13:52 +00:00
parent cf3686a509
commit 02265ba224
No known key found for this signature in database

View File

@ -16,6 +16,10 @@ export class DatabaseBackupService extends BaseService {
}
async deleteBackup(files: string[]): Promise<void> {
if (files.some((filename) => !isValidBackupName(filename))) {
throw new BadRequestException('Invalid backup name!');
}
await Promise.all(files.map((filename) => deleteBackup(this.backupRepos, basename(filename))));
}