fix: address security vulnerabilities and add image attachments

- Fix type confusion vulnerability in comment content updates
- Validate pagination offsets to prevent negative values
- Validate timestamp is a valid number before parsing
- Exclude guestEmail from comment API responses for privacy
- Fix TypeScript error in audio upload route
- Add image attachment support for comments with upload API
- Update admin dashboard to track image attachments
- Rename cleanup functions to handle both voice and image media
This commit is contained in:
Yusuf İpek
2026-02-21 16:40:58 +03:00
parent cd9b89c971
commit e32196c430
15 changed files with 837 additions and 119 deletions
+9
View File
@@ -17,6 +17,7 @@ export async function GET() {
totalVideos,
totalComments,
totalVoiceComments,
totalImageComments,
] = await Promise.all([
db.user.count(),
db.project.count(),
@@ -28,6 +29,13 @@ export async function GET() {
not: null,
}
}
}),
db.comment.count({
where: {
imageUrl: {
not: null,
}
}
})
]);
@@ -40,6 +48,7 @@ export async function GET() {
totalVideos,
totalComments,
totalVoiceComments,
totalImageComments,
totalStorageBytes,
});
} catch (error) {