sune-org/ORP
1
0
Fork 0
mirror of https://github.com/sune-org/ORP.git synced 2026-01-14 00:27:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Require UID, remove anon fallback

Browse Source
This commit is contained in:
multipleof4
2025-09-27 18:02:26 -07:00
parent 02eaf94c49
commit 18bc080137
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
index.js
View File

@@ -33,8 +33,9 @@ export default {
const isWs = req.headers.get('Upgrade') === 'websocket'; const isWs = req.headers.get('Upgrade') === 'websocket';
if (!isGet && !isWs) return withCORS(new Response('method not allowed', { status: 405 })); if (!isGet && !isWs) return withCORS(new Response('method not allowed', { status: 405 }));
const rawUid = url.searchParams.get('uid') || 'anon'; const uid = (url.searchParams.get('uid') || '').slice(0, 64).replace(/[^a-zA-Z0-9_-]/g, '');
const uid = String(rawUid).slice(0, 64).replace(/[^a-zA-Z0-9_-]/g, '') || 'anon'; if (!uid) return withCORS(new Response('uid is required', { status: 400 }));
const id = env.MY_DURABLE_OBJECT.idFromName(uid); const id = env.MY_DURABLE_OBJECT.idFromName(uid);
const stub = env.MY_DURABLE_OBJECT.get(id); const stub = env.MY_DURABLE_OBJECT.get(id);