TASK22017: phase 8 hardening for sensitive hash-guarded APIs

2026-03-13 11:38:14 +00:00
parent f28b25cc24
commit 52202f4e1c
7 changed files with 347 additions and 90 deletions
@@ -74,7 +74,7 @@ export const deleteAwaitingSubmissionsFromBlob = (

    var config = {
        method: "get",
-        url: queryUrl
+        url: queryUrl + hashAPIPath(queryUrl)
    };
    return axios(config)
        .then((res) => {
@@ -100,7 +100,7 @@ export const deleteMyRepresentationsFromBlob = (

    var config = {
        method: "get",
-        url: queryUrl
+        url: queryUrl + hashAPIPath(queryUrl)
    };
    return axios(config)
        .then((res) => {
@@ -222,13 +222,20 @@ export const sendCaseCompleteMessage = async (
    caseReference,
    inv
 ) => {
+    var hashQueryPath =
+        "/api/file/createappealcompletemessage_api?container=" +
+        containerID +
+        "&tempcaseref=" +
+        caseReference;
+
    var queryUrl =
        "/api/file/createappealcompletemessage_api?container=" +
        containerID +
        "&tempcaseref=" +
        caseReference +
        "&inv=" +
-        inv;
+        inv +
+        hashAPIPath(hashQueryPath);

    var config = {
        method: "get",