fix(overpass): bound query validation and reject cross-site requests

This commit is contained in:
Said committed 2026-10-19 23:02:46 +01:00
1 parent 38e037d3a7
commit ac9cd4ab84
6 files changed
+243 -11

No files matched your search

+2
View File
@@ -253,6 +253,7 @@
"server/providers/common/http.js",
"server/providers/common/rate-limit.js",
"server/providers/common/request.js",
"server/providers/common/same-site.js",
"server/providers/overpass.js",
"server/providers/overpass/cache.js",
"server/providers/overpass/constants.js",
@@ -262,6 +263,7 @@
"server/providers/places/routes.js",
"src/data/placeProviderPayloads.js",
"src/data/routeSteps.js",
"src/localRequestGate.mjs",
"src/sources/httpBody.js",
"src/i18n/marker.js",
"src/sources/overpass.js",