chore: validate filename for deletion

This commit is contained in:
izzy
2025-12-03 12:13:52 +00:00
parent cf3686a509
commit 02265ba224

View File

@@ -16,6 +16,10 @@ export class DatabaseBackupService extends BaseService {
}
async deleteBackup(files: string[]): Promise<void> {
if (files.some((filename) => !isValidBackupName(filename))) {
throw new BadRequestException('Invalid backup name!');
}
await Promise.all(files.map((filename) => deleteBackup(this.backupRepos, basename(filename))));
}