TASK22019: phase 13 harden delete and involvement guards

2026-03-13 13:02:49 +00:00
parent 0ca63d0228
commit 846cba1645
5 changed files with 231 additions and 10 deletions
@@ -16,7 +16,9 @@ ApiProxy.get(async (req, res) => {
        typeof containerName === "undefined" ||
        containerName.length === 0 ||
        typeof casefolderID === "undefined" ||
-        casefolderID.length === 0
+        casefolderID.length === 0 ||
+        typeof checkHash === "undefined" ||
+        checkHash.length === 0
    ) {
        return res.status(400).json();
    }
@@ -27,12 +29,14 @@ ApiProxy.get(async (req, res) => {
        "&casefolderID=" +
        casefolderID;

+    if (hashAPIPath(checkquerypath) != "&hash=" + checkHash) {
+        return res.status(400).json();
+    }
+
    if (hashAPIPath(checkquerypath) == "&hash=" + checkHash) {
        await deleteBlobCase(containerName, casefolderID).then((data) => {
            return res.status(200).json({ data: data });
        });
-    } else {
-        return res.status(400).json();
    }
 });