Skip to content

Commit e3e43f3

Browse files
committed
fix: export rejectApiRawFilters from restApi module and update index exports
AdminForth/1731/security-audit
1 parent d4c9b85 commit e3e43f3

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

adminforth/index.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ import {
3535

3636
import AdminForthPlugin from './basePlugin.js';
3737
import ConfigValidator from './modules/configValidator.js';
38-
import AdminForthRestAPI, { interpretResource } from './modules/restApi.js';
38+
import AdminForthRestAPI, { interpretResource, rejectApiRawFilters } from './modules/restApi.js';
3939
import OperationalResource from './modules/operationalResource.js';
4040
import SocketBroker from './modules/socketBroker.js';
4141
import { afLogger } from './modules/logger.js';
@@ -50,7 +50,7 @@ export * from './types/adapters/index.js';
5050
export * from './modules/filtersTools.js';
5151
export * from './modules/requestContext.js';
5252
export * from './modules/utils.js';
53-
export { interpretResource };
53+
export { interpretResource, rejectApiRawFilters };
5454
export { AdminForthPlugin };
5555
export { suggestIfTypo, RateLimiter, RAMLock, getClientIp, convertPeriodToSeconds };
5656
export { default as AdminForthBaseConnector } from './dataConnectors/baseConnector.js';

adminforth/modules/restApi.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -259,7 +259,7 @@ function hasApiRawFilter(filters: any): boolean {
259259
return Array.isArray(filters.subFilters) && filters.subFilters.some(hasApiRawFilter);
260260
}
261261

262-
function rejectApiRawFilters(filters: any): { error: string } | undefined {
262+
export function rejectApiRawFilters(filters: any): { error: string } | undefined {
263263
if (hasApiRawFilter(filters)) {
264264
return { error: 'insecureRawSQL and insecureRawNoSQL filters are not allowed in API requests' };
265265
}

0 commit comments

Comments
 (0)