shekhar/windows-iso-downloader
1
0
Fork 0
Code Issues Pull requests Projects Releases 15 Packages Wiki Activity Actions

Merge pull request #10 from starkSV/feat/cf-worker-proxy

Browse source 
fix(backend): allow non-numeric SKU IDs for legacy Windows products
This commit is contained in:
Shekhar 2026-05-18 12:46:27 +05:30 • committed by GitHub
commit ea83c22f9f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
backend/main.go
View file

@ -36,6 +36,7 @@ var (
cacheMutex sync.RWMutex
SESSION_TTL = 15 * time.Minute
workerSecret = os.Getenv("CF_WORKER_SECRET")
validSkuID = regexp.MustCompile(`^[a-zA-Z0-9_\-]+$`)
)
func setWorkerSecret(req *http.Request) {
@ -312,8 +313,8 @@ func handleProxy(w http.ResponseWriter, r *http.Request) {
respondJSONError(w, http.StatusBadRequest, "product_id must be a numeric value")
return
}
if _, err := strconv.Atoi(skuID); err != nil {
respondJSONError(w, http.StatusBadRequest, "sku_id must be a numeric value")
if !validSkuID.MatchString(skuID) {
respondJSONError(w, http.StatusBadRequest, "sku_id contains invalid characters")
return
}