Pagwin/BinghamtonBetterBus-v2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

realized I was allowing query injection to graph db for no reason

Browse source
This commit is contained in:
Pagwin 2025-04-25 22:42:19 -04:00
parent a7a7abd901
commit c6f5e8245a
No known key found for this signature in database
GPG key ID: 81137023740CA260
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/server/graph.ts
View file

@ -74,18 +74,19 @@ async function stops_json_node_import(
n.originalId = $originalId, n.originalId = $originalId,
n.latitude = $lat, n.latitude = $lat,
n.longitude = $lng, n.longitude = $lng,
n.source = '${provider}' n.source = $provider
ON MATCH SET ON MATCH SET
n.originalId = $originalId, n.originalId = $originalId,
n.latitude = $lat, n.latitude = $lat,
n.longitude = $lng, n.longitude = $lng,
n.source = '${provider}' n.source = $provider
`, `,
{ {
id: `${provider}_${node.id}`, id: `${provider}_${node.id}`,
originalId: node.id, originalId: node.id,
lat: node.lat, lat: node.lat,
lng: node.lng, lng: node.lng,
provider,
}, },
); );
} }
@ -116,14 +117,14 @@ async function stops_gtfs_node_import(
s.longitude = $lng, s.longitude = $lng,
s.url = $url, s.url = $url,
s.originalId = $originalId, s.originalId = $originalId,
s.source = '${provider}' s.source = $provider
ON MATCH SET ON MATCH SET
s.name = $name, s.name = $name,
s.latitude = $lat, s.latitude = $lat,
s.longitude = $lng, s.longitude = $lng,
s.url = $url, s.url = $url,
s.originalId = $originalId, s.originalId = $originalId,
s.source = '${provider}' s.source = $provider
`, `,
{ {
id: `${provider}_` + stop.stop_id, id: `${provider}_` + stop.stop_id,
@ -135,6 +136,7 @@ async function stops_gtfs_node_import(
parentStation: stop.parent_station || null, parentStation: stop.parent_station || null,
zoneId: stop.zone_id || null, zoneId: stop.zone_id || null,
url: stop.stop_url || null, url: stop.stop_url || null,
provider,
}, },
); );
} }