snowykami/meilisearch
1
0
Fork 0
mirror of https://github.com/meilisearch/meilisearch.git synced 2025-09-09 22:26:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check the Rhai syntax before accepting the script

Browse Source
This commit is contained in:
Clément Renault
2024-05-09 21:51:51 +02:00
parent 2d97164d9f
commit 45af18ae9c
3 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
meilisearch/src/routes/indexes/documents.rs
View File

@ -599,6 +599,11 @@ pub async fn edit_documents_by_function(
// analytics.delete_documents(DocumentDeletionKind::PerFilter, &req);
let engine = milli::rhai::Engine::new();
if let Err(e) = engine.compile(&function) {
return Err(ResponseError::from_msg(e.to_string(), Code::BadRequest));
}
if let Some(ref filter) = filter {
// we ensure the filter is well formed before enqueuing it
|| -> Result<_, ResponseError> {