Enhance security by adding role-checking functions in ESLint configuration and updating Vue components to improve content sanitization comments, while refining error handling in API endpoints for better clarity.

2025-12-20 14:19:55 +01:00
parent 19024cd87e
commit e128e1a77c
22 changed files with 40 additions and 25 deletions
--- a/server/api/spielplan/download/[filename].get.js
+++ b/server/api/spielplan/download/[filename].get.js
@@ -53,7 +53,8 @@ export default defineEventHandler(async (event) => {
      filePath = path.join(process.cwd(), 'public', 'documents', 'spielplaene', 'spielplan_gesamt.pdf')
    } else {
      // Für vordefinierte PDFs
-      filePath = path.join(process.cwd(), 'public', 'documents', 'spielplaene', sanitizedFilename) // nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal
+      // nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal
+      filePath = path.join(process.cwd(), 'public', 'documents', 'spielplaene', sanitizedFilename)
    }
    
    // Prüfe ob Datei existiert