X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server%2Fmiddlewares%2Fvalidators%2Fabuse.ts;h=70bae17758d48a8308529d862e5f9a22e7971036;hb=2c015b54192f2080f756c424173bac2bd53e7ca9;hp=56c97747cefa7a810f6ef8b33a71152eefafccea;hpb=10363c74c1d869f0e0c7bc4d0367b1f34d1bb6a4;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/middlewares/validators/abuse.ts b/server/middlewares/validators/abuse.ts index 56c97747c..70bae1775 100644 --- a/server/middlewares/validators/abuse.ts +++ b/server/middlewares/validators/abuse.ts @@ -1,4 +1,4 @@ -import * as express from 'express' +import express from 'express' import { body, param, query } from 'express-validator' import { areAbusePredefinedReasonsValid, @@ -12,54 +12,47 @@ import { isAbuseTimestampValid, isAbuseVideoIsValid } from '@server/helpers/custom-validators/abuses' -import { exists, isIdOrUUIDValid, isIdValid, toIntOrNull } from '@server/helpers/custom-validators/misc' +import { exists, isIdOrUUIDValid, isIdValid, toCompleteUUID, toIntOrNull } from '@server/helpers/custom-validators/misc' import { logger } from '@server/helpers/logger' import { AbuseMessageModel } from '@server/models/abuse/abuse-message' import { AbuseCreate, UserRight } from '@shared/models' -import { HttpStatusCode } from '../../../shared/core-utils/miscs/http-error-codes' +import { HttpStatusCode } from '../../../shared/models/http/http-error-codes' import { areValidationErrors, doesAbuseExist, doesAccountIdExist, doesCommentIdExist, doesVideoExist } from './shared' +import { forceNumber } from '@shared/core-utils' const abuseReportValidator = [ body('account.id') .optional() - .custom(isIdValid) - .withMessage('Should have a valid accountId'), + .custom(isIdValid), body('video.id') .optional() - .custom(isIdOrUUIDValid) - .withMessage('Should have a valid videoId'), + .customSanitizer(toCompleteUUID) + .custom(isIdOrUUIDValid), body('video.startAt') .optional() .customSanitizer(toIntOrNull) - .custom(isAbuseTimestampValid) - .withMessage('Should have valid starting time value'), + .custom(isAbuseTimestampValid), body('video.endAt') .optional() .customSanitizer(toIntOrNull) .custom(isAbuseTimestampValid) - .withMessage('Should have valid ending time value') .bail() .custom(isAbuseTimestampCoherent) .withMessage('Should have a startAt timestamp beginning before endAt'), body('comment.id') .optional() - .custom(isIdValid) - .withMessage('Should have a valid commentId'), + .custom(isIdValid), body('reason') - .custom(isAbuseReasonValid) - .withMessage('Should have a valid reason'), + .custom(isAbuseReasonValid), body('predefinedReasons') .optional() - .custom(areAbusePredefinedReasonsValid) - .withMessage('Should have a valid list of predefined reasons'), + .custom(areAbusePredefinedReasonsValid), async (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking abuseReport parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return const body: AbuseCreate = req.body @@ -78,11 +71,10 @@ const abuseReportValidator = [ ] const abuseGetValidator = [ - param('id').custom(isIdValid).not().isEmpty().withMessage('Should have a valid id'), + param('id') + .custom(isIdValid), async (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking abuseGetValidator parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return if (!await doesAbuseExist(req.params.id, res)) return @@ -91,18 +83,17 @@ const abuseGetValidator = [ ] const abuseUpdateValidator = [ - param('id').custom(isIdValid).not().isEmpty().withMessage('Should have a valid id'), + param('id') + .custom(isIdValid), body('state') .optional() - .custom(isAbuseStateValid).withMessage('Should have a valid abuse state'), + .custom(isAbuseStateValid), body('moderationComment') .optional() - .custom(isAbuseModerationCommentValid).withMessage('Should have a valid moderation comment'), + .custom(isAbuseModerationCommentValid), async (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking abuseUpdateValidator parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return if (!await doesAbuseExist(req.params.id, res)) return @@ -113,40 +104,36 @@ const abuseUpdateValidator = [ const abuseListForAdminsValidator = [ query('id') .optional() - .custom(isIdValid).withMessage('Should have a valid id'), + .custom(isIdValid), query('filter') .optional() - .custom(isAbuseFilterValid) - .withMessage('Should have a valid filter'), + .custom(isAbuseFilterValid), query('predefinedReason') .optional() - .custom(isAbusePredefinedReasonValid) - .withMessage('Should have a valid predefinedReason'), + .custom(isAbusePredefinedReasonValid), query('search') .optional() - .custom(exists).withMessage('Should have a valid search'), + .custom(exists), query('state') .optional() - .custom(isAbuseStateValid).withMessage('Should have a valid abuse state'), + .custom(isAbuseStateValid), query('videoIs') .optional() - .custom(isAbuseVideoIsValid).withMessage('Should have a valid "video is" attribute'), + .custom(isAbuseVideoIsValid), query('searchReporter') .optional() - .custom(exists).withMessage('Should have a valid reporter search'), + .custom(exists), query('searchReportee') .optional() - .custom(exists).withMessage('Should have a valid reportee search'), + .custom(exists), query('searchVideo') .optional() - .custom(exists).withMessage('Should have a valid video search'), + .custom(exists), query('searchVideoChannel') .optional() - .custom(exists).withMessage('Should have a valid video channel search'), + .custom(exists), (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking abuseListForAdminsValidator parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return return next() @@ -156,19 +143,17 @@ const abuseListForAdminsValidator = [ const abuseListForUserValidator = [ query('id') .optional() - .custom(isIdValid).withMessage('Should have a valid id'), + .custom(isIdValid), query('search') .optional() - .custom(exists).withMessage('Should have a valid search'), + .custom(exists), query('state') .optional() - .custom(isAbuseStateValid).withMessage('Should have a valid abuse state'), + .custom(isAbuseStateValid), (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking abuseListForUserValidator parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return return next() @@ -176,11 +161,10 @@ const abuseListForUserValidator = [ ] const getAbuseValidator = [ - param('id').custom(isIdValid).not().isEmpty().withMessage('Should have a valid id'), + param('id') + .custom(isIdValid), async (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking getAbuseValidator parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return if (!await doesAbuseExist(req.params.id, res)) return @@ -203,8 +187,6 @@ const getAbuseValidator = [ const checkAbuseValidForMessagesValidator = [ (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking checkAbuseValidForMessagesValidator parameters', { parameters: req.body }) - const abuse = res.locals.abuse if (abuse.ReporterAccount.isOwned() === false) { return res.fail({ message: 'This abuse was created by a user of your instance.' }) @@ -215,11 +197,10 @@ const checkAbuseValidForMessagesValidator = [ ] const addAbuseMessageValidator = [ - body('message').custom(isAbuseMessageValid).not().isEmpty().withMessage('Should have a valid abuse message'), + body('message') + .custom(isAbuseMessageValid), (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking addAbuseMessageValidator parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return return next() @@ -227,17 +208,16 @@ const addAbuseMessageValidator = [ ] const deleteAbuseMessageValidator = [ - param('messageId').custom(isIdValid).not().isEmpty().withMessage('Should have a valid message id'), + param('messageId') + .custom(isIdValid), async (req: express.Request, res: express.Response, next: express.NextFunction) => { - logger.debug('Checking deleteAbuseMessageValidator parameters', { parameters: req.body }) - if (areValidationErrors(req, res)) return const user = res.locals.oauth.token.user const abuse = res.locals.abuse - const messageId = parseInt(req.params.messageId + '', 10) + const messageId = forceNumber(req.params.messageId) const abuseMessage = await AbuseMessageModel.loadByIdAndAbuseId(messageId, abuse.id) if (!abuseMessage) {