From 8d703183e8e9ba6d9c966d6621151b92c7793eef Mon Sep 17 00:00:00 2001 From: multipleof4 Date: Fri, 21 Nov 2025 12:49:42 -0800 Subject: [PATCH] Fix: Prevent deletion of seized links --- functions/api/links/delete.js | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/functions/api/links/delete.js b/functions/api/links/delete.js index c341de0..5dbdcc9 100644 --- a/functions/api/links/delete.js +++ b/functions/api/links/delete.js @@ -41,6 +41,11 @@ export async function onRequestPost({ request, env }) { if (!Array.isArray(slugs) || !slugs.includes(slug)) return new Response("Unauthorized",{ status:403 }); + // Check seizure + const current = await env.KV_EV.get(slug); + if (current?.startsWith('🚫')) + return new Response("Link seized. Cannot delete.", { status: 403 }); + const newSlugs = slugs.filter(s => s !== slug); await Promise.all([ env.KV_EV.delete(slug), @@ -61,3 +66,4 @@ export async function onRequestPost({ request, env }) { return new Response(e.message,{ status:500 }); } } +