check if prints are allowed

deepsource-autofix-76c6eb20
Dan Gowans 2022-11-22 15:00:10 -05:00
parent 8af17ca30d
commit a06186ede0
4 changed files with 19 additions and 4 deletions

View File

@ -9,6 +9,11 @@ import camelcase from "camelcase";
const attachmentOrInline = configFunctions.getProperty("settings.printPdf.contentDisposition");
export const handler = async (request, response, next) => {
const printName = request.params.printName;
if (!configFunctions.getProperty("settings.lotOccupancy.prints").includes("pdf/" + printName) &&
!configFunctions.getProperty("settings.workOrders.prints").includes("pdf/" + printName)) {
return response.redirect(configFunctions.getProperty("reverseProxy.urlPrefix") +
"/dashboard/?error=printConfigNotAllowed");
}
const printConfig = getPdfPrintConfig(printName);
if (!printConfig) {
return response.redirect(configFunctions.getProperty("reverseProxy.urlPrefix") +

View File

@ -17,6 +17,16 @@ const attachmentOrInline = configFunctions.getProperty("settings.printPdf.conten
export const handler: RequestHandler = async (request, response, next) => {
const printName = request.params.printName;
if (
!configFunctions.getProperty("settings.lotOccupancy.prints").includes("pdf/" + printName) &&
!configFunctions.getProperty("settings.workOrders.prints").includes("pdf/" + printName)
) {
return response.redirect(
configFunctions.getProperty("reverseProxy.urlPrefix") +
"/dashboard/?error=printConfigNotAllowed"
);
}
const printConfig = getPdfPrintConfig(printName);
if (!printConfig) {

View File

@ -2,8 +2,8 @@ import * as configFunctions from "../../helpers/functions.config.js";
import { getReportData, getScreenPrintConfig } from "../../helpers/functions.print.js";
export const handler = (request, response) => {
const printName = request.params.printName;
if (!configFunctions.getProperty("settings.lotOccupancy.prints").includes(printName) &&
!configFunctions.getProperty("settings.workOrders.prints").includes(printName)) {
if (!configFunctions.getProperty("settings.lotOccupancy.prints").includes("screen/" + printName) &&
!configFunctions.getProperty("settings.workOrders.prints").includes("screen/" + printName)) {
return response.redirect(configFunctions.getProperty("reverseProxy.urlPrefix") +
"/dashboard/?error=printConfigNotAllowed");
}

View File

@ -7,8 +7,8 @@ export const handler: RequestHandler = (request, response) => {
const printName = request.params.printName;
if (
!configFunctions.getProperty("settings.lotOccupancy.prints").includes(printName) &&
!configFunctions.getProperty("settings.workOrders.prints").includes(printName)
!configFunctions.getProperty("settings.lotOccupancy.prints").includes("screen/" + printName) &&
!configFunctions.getProperty("settings.workOrders.prints").includes("screen/" + printName)
) {
return response.redirect(
configFunctions.getProperty("reverseProxy.urlPrefix") +