BullBoardの認証をバイパスしてしまわないように

mei23 · Apr 14, 2024 · e6c9e75 · e6c9e75
1 parent af96fe6
commit e6c9e75
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/packages/backend/src/server/web/index.ts b/packages/backend/src/server/web/index.ts
@@ -44,7 +44,9 @@ const bullBoardPath = '/queue';
 
 // Authenticate
 app.use(async (ctx, next) => {
-	if (ctx.path === bullBoardPath || ctx.path.startsWith(bullBoardPath + '/')) {
+	// %71ueueとかでリクエストされたら困るため
+	const url = decodeURI(ctx.path);
+	if (url === bullBoardPath || url.startsWith(bullBoardPath + '/')) {
 		const token = ctx.cookies.get('token');
 		if (token == null) {
 			ctx.status = 401;