fix

2026-05-16 11:58:24 +01:00
parent bf1abe39c8
commit 4feac9a1fc
3 changed files with 59 additions and 5 deletions
@@ -92,6 +92,20 @@ function isAllowedApiUrl(req) {
    return keys.every((key) => key === 'name') && name.length >= 2 && name.length <= MAX_TEAM_NAME_LENGTH
  }

+  if (url.pathname === '/api/tss/teams/search') {
+    const keys = [...params.keys()]
+    const query = params.get('q') || params.get('name') || ''
+    const limit = Number(params.get('limit') || 10)
+    return (
+      keys.every((key) => ['q', 'name', 'limit'].includes(key)) &&
+      query.length >= 2 &&
+      query.length <= MAX_TEAM_NAME_LENGTH &&
+      Number.isInteger(limit) &&
+      limit >= 1 &&
+      limit <= 20
+    )
+  }
+
  if ([...params.keys()].length) return false

  try {