byte limit

This commit is contained in:
purerosefallen 2020-05-06 21:12:49 +08:00
parent 61dc667705
commit 6a93ad2735
No known key found for this signature in database
GPG Key ID: E6D78C90943A3185

2
app.py
View File

@ -340,7 +340,7 @@ def route_admin_songs_id_delete(id):
@app.cache.cached(timeout=15, query_string=True)
def route_api_preview():
song_id = request.args.get('id', None)
if not song_id or not re.match('^[0-9]+$', song_id):
if not song_id or not re.match('^[0-9]{1,9}}$', song_id):
abort(400)
song_id = int(song_id)