fix: correct regex for valid API post path validation

2026-05-18 12:44:54 +02:00
parent 48aa607b56
commit b1eb2b3c9b
1 changed files with 1 additions and 1 deletions
@@ -73,7 +73,7 @@ export function isValidApiPostPath(path: unknown): path is string {
  if (!path.startsWith('/api/')) return false;
  if (path.includes('..')) return false;
  if (/[\s'"`;,()?#]/.test(path)) return false;
-  if (!/^[/A-Za-z0-9._\-]+$/.test(path)) return false;
+  if (!/^[/A-Za-z0-9._-]+$/.test(path)) return false;
  return true;
 }