feat: Add validation for offset and limit in PostService

winverse · winverse · commit a176bb7fab63 · 2024-08-28T16:08:21.000+09:00
diff --git a/apps/server/src/services/PostService/index.ts b/apps/server/src/services/PostService/index.ts
@@ -258,7 +258,7 @@ export class PostService implements Service {
       throw new BadRequestError('Invalid timeframe')
     }
 
-    if (timeframe === 'year' && offset > 1000) {
+    if (timeframe === 'year' && (offset > 1000 || limit > 20)) {
       console.log('Detected GraphQL Abuse', ip)
       return []
     }

Original file line number	Diff line number	Diff line change
`@@ -258,7 +258,7 @@ export class PostService implements Service {`
`258`	`258`	`throw new BadRequestError('Invalid timeframe')`
`259`	`259`	`}`
`260`	`260`
`261`		`- if (timeframe === 'year' && offset > 1000) {`
	`261`	`+ if (timeframe === 'year' && (offset > 1000 \|\| limit > 20)) {`
`262`	`262`	`console.log('Detected GraphQL Abuse', ip)`
`263`	`263`	`return []`
`264`	`264`	`}`