Pagwin/BinghamtonBetterBus-v2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

realized I was allowing query injection to graph db for no reason

Browse source
This commit is contained in:
Pagwin 2025-04-25 22:42:19 -04:00
parent a7a7abd901
commit c6f5e8245a
No known key found for this signature in database
GPG key ID: 81137023740CA260
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/server/graph.ts
View file

@ -74,18 +74,19 @@ async function stops_json_node_import(
n.originalId = $originalId,
n.latitude = $lat,
n.longitude = $lng,
n.source = '${provider}'
n.source = $provider
ON MATCH SET
n.originalId = $originalId,
n.latitude = $lat,
n.longitude = $lng,
n.source = '${provider}'
n.source = $provider
`,
{
id: `${provider}_${node.id}`,
originalId: node.id,
lat: node.lat,
lng: node.lng,
provider,
},
);
}
@ -116,14 +117,14 @@ async function stops_gtfs_node_import(
s.longitude = $lng,
s.url = $url,
s.originalId = $originalId,
s.source = '${provider}'
s.source = $provider
ON MATCH SET
s.name = $name,
s.latitude = $lat,
s.longitude = $lng,
s.url = $url,
s.originalId = $originalId,
s.source = '${provider}'
s.source = $provider
`,
{
id: `${provider}_` + stop.stop_id,
@ -135,6 +136,7 @@ async function stops_gtfs_node_import(
parentStation: stop.parent_station || null,
zoneId: stop.zone_id || null,
url: stop.stop_url || null,
provider,
},
);
}