diff --git a/app/api/projects/[projectId]/videos/[videoId]/route.ts b/app/api/projects/[projectId]/videos/[videoId]/route.ts index 44f57ed..050b010 100644 --- a/app/api/projects/[projectId]/videos/[videoId]/route.ts +++ b/app/api/projects/[projectId]/videos/[videoId]/route.ts @@ -26,9 +26,7 @@ export async function GET(request: NextRequest, { params }: RouteParams) { include: { project: true, versions: { - where: { isActive: true }, orderBy: { versionNumber: 'desc' }, - take: 1, include: { comments: { orderBy: { timestamp: 'asc' }, @@ -126,7 +124,7 @@ export async function PATCH(request: NextRequest, { params }: RouteParams) { const body = await request.json(); const { title, description, position } = body; - + // Validate types before using string methods to prevent type confusion attacks const updateData: Record = {}; if (typeof title === 'string') updateData.title = title.trim(); diff --git a/app/api/watch/[videoId]/route.ts b/app/api/watch/[videoId]/route.ts index 6f13ebe..f1e9f90 100644 --- a/app/api/watch/[videoId]/route.ts +++ b/app/api/watch/[videoId]/route.ts @@ -25,9 +25,7 @@ export async function GET(request: NextRequest, { params }: RouteParams) { include: { project: true, versions: { - where: { isActive: true }, orderBy: { versionNumber: 'desc' }, - take: 1, ...(includeComments ? { include: { comments: {