joe/kami-parse-server
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: security vulnerability that allows remote code execution (GHSA-p6h4-93qp-jhcm) (#7844)

Browse Source
This commit is contained in:
Manuel
2022-03-12 14:47:23 +01:00
committed by GitHub
parent 972b800ae4
commit e569f402b1
11 changed files with 450 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/Controllers/index.js
View File

@@ -142,7 +142,7 @@ export function getLiveQueryController(options: ParseServerOptions): LiveQueryCo
}
export function getDatabaseController(options: ParseServerOptions): DatabaseController {
const { databaseURI, collectionPrefix, databaseOptions, idempotencyOptions } = options;
const { databaseURI, collectionPrefix, databaseOptions } = options;
let { databaseAdapter } = options;
if (
(databaseOptions ||
@@ -156,7 +156,7 @@ export function getDatabaseController(options: ParseServerOptions): DatabaseCont
} else {
databaseAdapter = loadAdapter(databaseAdapter);
}
return new DatabaseController(databaseAdapter, idempotencyOptions);
return new DatabaseController(databaseAdapter, options);
}
export function getHooksController(