summary refs log tree commit diff
path: root/src
diff options
context:
space:
mode:
authorChrisChrome <christophercookman@gmail.com>2023-01-18 12:26:08 -0700
committerChrisChrome <christophercookman@gmail.com>2023-01-18 12:27:15 -0700
commit70475d8397fa9ca8b7e62f7e2fc0b4cba6e41dba (patch)
tree1d19f5a5d4a4626b58c136b44230af42f8e30665 /src
parentMerge pull request #952 from fosscord/dev/endpoints-in-ping (diff)
downloadserver-70475d8397fa9ca8b7e62f7e2fc0b4cba6e41dba.tar.xz
Fix a funny security vuln
Diffstat (limited to 'src')
-rw-r--r--src/api/routes/guilds/#guild_id/index.ts2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/api/routes/guilds/#guild_id/index.ts b/src/api/routes/guilds/#guild_id/index.ts

index 3f3f61cd..0df90f56 100644 --- a/src/api/routes/guilds/#guild_id/index.ts +++ b/src/api/routes/guilds/#guild_id/index.ts
@@ -55,7 +55,7 @@ router.get("/", route({}), async (req: Request, res: Response) => { router.patch( "/", - route({ body: "GuildUpdateSchema" }), + route({ body: "GuildUpdateSchema", permission: "MANAGE_GUILD" }), async (req: Request, res: Response) => { const body = req.body as GuildUpdateSchema; const { guild_id } = req.params;