chore: fixed security vulnerability

forscht · Jan 11, 2023 · 10a7d20 · 10a7d20
1 parent 2b0509d
commit 10a7d20
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@forscht/ddrive",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "A lightweight cloud storage system using discord as storage device written in nodejs",
   "main": "src/index.js",
   "author": "Darshan Patel <darshanhihoriya@gmail.com> (https://github.com/forscht/ddrive)",

diff --git a/src/HTTP/services/database.js b/src/HTTP/services/database.js
@@ -55,8 +55,8 @@ const getDirectory = async (id = null, child = false) => {
             `(select json_agg(r) FROM (select "d".*, sum(b.size) as size
                          from "directory" as "d"
                                   left join "block" as "b" on "d"."id" = "b"."fileId"
-                         where "d"."parentId" = '${id}'
-                         group by "d"."id") r ) as child`,
+                         where "d"."parentId" = ?
+                         group by "d"."id") r ) as child`, [id],
         ))
     }