backend: apply stricter regexp

This commit is contained in:
0x1eef 2023-12-24 16:21:25 -03:00
parent 1d028c1b9a
commit d3e2381c53

View file

@ -9,7 +9,7 @@ class Twenty::Servlet::Tasks < Twenty::Servlet
when ""
tasks = Twenty::Task.open.order(updated_at: :desc)
ok(res, tasks:)
when %r{^/([\d]+)/?$}
when %r{\A/([\d]+)/?\z}
task = Twenty::Task.find_by(id: $1)
task ? ok(res, task:) : not_found(res)
else
@ -52,7 +52,7 @@ class Twenty::Servlet::Tasks < Twenty::Servlet
# DELETE /servlet/tasks/<id>/
def do_DELETE(req, res)
case req.path_info
when %r{^/([\d]+)/?$}
when %r{\A/([\d]+)/?\z}
task = Twenty::Task.find_by(id: $1)
task.destroy ? ok(res) : not_found(res)
else