Merge pull request #4 from lassejlv/development

lassejlv · web-flow · commit 7aa01b7c313c · 2024-12-09T15:43:58.000+01:00
Update allowDangerousSqlCommands message
diff --git a/index.ts b/index.ts
@@ -31,7 +31,7 @@ app.post('/query', zValidator('json', schema), async (c) => {
     const allowDangerousSqlCommands = process.env.ALLOW_DANGEROUS_SQL_COMMANDS === 'true'
 
     if (!allowDangerousSqlCommands && (query.includes('DROP') || query.includes('DELETE') || query.includes('TRUNCATE'))) {
-      return c.json({ error: 'Dangerous SQL command' }, 400)
+      return c.json({ error: 'dangerous sql commands is disabled' }, 400)
     }
 
     const result = await pool.query(query, args);

Original file line number	Diff line number	Diff line change
`@@ -31,7 +31,7 @@ app.post('/query', zValidator('json', schema), async (c) => {`
`31`	`31`	`const allowDangerousSqlCommands = process.env.ALLOW_DANGEROUS_SQL_COMMANDS === 'true'`
`32`	`32`
`33`	`33`	`if (!allowDangerousSqlCommands && (query.includes('DROP') \|\| query.includes('DELETE') \|\| query.includes('TRUNCATE'))) {`
`34`		`- return c.json({ error: 'Dangerous SQL command' }, 400)`
	`34`	`+ return c.json({ error: 'dangerous sql commands is disabled' }, 400)`
`35`	`35`	`}`
`36`	`36`
`37`	`37`	`const result = await pool.query(query, args);`