fix

2026-05-16 11:58:24 +01:00
parent bf1abe39c8
commit 4feac9a1fc
3 changed files with 59 additions and 5 deletions
@@ -1533,6 +1533,23 @@ function allowedApiTarget(req) {
    return url
  }

+  if (pathname === '/api/tss/teams/search') {
+    const keys = [...params.keys()]
+    const query = params.get('q') || params.get('name') || ''
+    const limit = Number(params.get('limit') || 10)
+    if (
+      keys.some((key) => !['q', 'name', 'limit'].includes(key)) ||
+      query.length < 2 ||
+      query.length > MAX_TEAM_NAME_LENGTH ||
+      !Number.isInteger(limit) ||
+      limit < 1 ||
+      limit > 20
+    ) {
+      return null
+    }
+    return url
+  }
+
  const teamMatch = pathname.match(/^\/api\/tss\/teams\/([^/]+)(?:\/(history|games))?$/)
  if (!teamMatch || [...params.keys()].length) return null