fix: prevent dots and spaces in page path during create

2019-10-02 00:44:18 -04:00
parent 2e0f861fb2
commit 95535aa3b0
2 changed files with 8 additions and 0 deletions
--- a/server/models/pages.js
+++ b/server/models/pages.js
@@ -213,6 +213,10 @@ module.exports = class Page extends Model {
   * @returns {Promise} Promise of the Page Model Instance
   */
  static async createPage(opts) {
+    if (opts.path.indexOf('.') >= 0 || opts.path.indexOf(' ') >= 0) {
+      throw new WIKI.Error.PageIllegalPath()
+    }
+
    const dupCheck = await WIKI.models.pages.query().select('id').where('localeCode', opts.locale).where('path', opts.path).first()
    if (dupCheck) {
      throw new WIKI.Error.PageDuplicateCreate()