yusufipek/OpenFrame
1
0
Fork 0
mirror of https://github.com/yusufipk/OpenFrame.git synced 2026-09-11 09:36:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(validation): implement validateAnnotationStrokes function for safe annotation data handling

Browse Source 
feat(rate-limit): add TRUSTED_PROXY_MODE for configurable proxy header trust
feat(comments): validate annotation data structure in comment routes and components
This commit is contained in:
Yusuf İpek
2026-04-10 20:38:22 +03:00
parent 03bfd565e8
commit 439e74d037
8 changed files with 134 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/video-page-content.tsx
+5 -2
View File
@@ -13,6 +13,7 @@ import { VideoPageLoading } from '@/components/video-page/video-page-loading';
import { VideoPageError } from '@/components/video-page/video-page-error';
import { GuestNameGate } from '@/components/video-page/guest-name-gate';
import { useCommentMedia } from '@/components/video-page/hooks/use-comment-media';
import { validateAnnotationStrokes } from '@/lib/validation';
import { useVersionActions } from '@/components/video-page/hooks/use-version-actions';
import { useWatchProgress } from '@/components/video-page/hooks/use-watch-progress';
import { useVideoPlayer } from '@/components/video-page/hooks/use-video-player';
@@ -498,7 +499,8 @@ export function VideoPageContent({
const editAnnotationInitialStrokes = useMemo<AnnotationStroke[] | undefined>(() => {
if (editAnnotationData) {
try {
return JSON.parse(editAnnotationData) as AnnotationStroke[];
const parsed = JSON.parse(editAnnotationData);
return (validateAnnotationStrokes(parsed) as AnnotationStroke[] | null) ?? undefined;
} catch {
return undefined;
}
@@ -507,7 +509,8 @@ export function VideoPageContent({
const editingComment = comments.find((comment) => comment.id === editingCommentId);
if (!editingComment?.annotationData) return undefined;
try {
return JSON.parse(editingComment.annotationData) as AnnotationStroke[];
const parsed = JSON.parse(editingComment.annotationData);
return (validateAnnotationStrokes(parsed) as AnnotationStroke[] | null) ?? undefined;
} catch {
return undefined;
}