Securty
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Elias Jansson
2026-01-27 20:57:06 +01:00
parent 37b5e96742
commit d287367283

View File

@@ -1,5 +1,6 @@
using Aberwyn.Data; using Aberwyn.Data;
using BencodeNET.Torrents; using BencodeNET.Torrents;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc; using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore; using Microsoft.EntityFrameworkCore;
@@ -24,7 +25,7 @@ public class RssController : Controller
_movieMetadataService = movieMetadataService; _movieMetadataService = movieMetadataService;
_context = context; _context = context;
} }
[Authorize(Roles = "Admin")]
[HttpGet] [HttpGet]
public async Task<IActionResult> Index(int page = 1, string sort = "date", string range = "all") public async Task<IActionResult> Index(int page = 1, string sort = "date", string range = "all")
{ {
@@ -105,7 +106,7 @@ public class RssController : Controller
} }
[Authorize(Roles = "Admin")]
[HttpPost] [HttpPost]
public async Task<IActionResult> Add(string torrentUrl) public async Task<IActionResult> Add(string torrentUrl)
{ {
@@ -164,7 +165,7 @@ public class RssController : Controller
} }
[Authorize(Roles = "Admin")]
[HttpPost] [HttpPost]
[ValidateAntiForgeryToken] [ValidateAntiForgeryToken]
public async Task<IActionResult> Upload(TorrentUploadViewModel model) public async Task<IActionResult> Upload(TorrentUploadViewModel model)
@@ -211,7 +212,7 @@ public class RssController : Controller
return View("Index", model); return View("Index", model);
} }
} }
[Authorize(Roles = "Admin")]
[HttpPost] [HttpPost]
[ValidateAntiForgeryToken] [ValidateAntiForgeryToken]
public async Task<IActionResult> RefreshStats(string infoHash, string scrapeUrl) public async Task<IActionResult> RefreshStats(string infoHash, string scrapeUrl)