tech
91c94bde88
- Add encodeURIComponent() for project, version, and filename parameters in downloadUrl to prevent XSS and URL breakage - Remove unused formatDateTime import Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
33 lines
1.0 KiB
TypeScript
33 lines
1.0 KiB
TypeScript
// app/api/apks/route.ts
|
|
import { NextResponse } from 'next/server';
|
|
import { getApks } from '@/lib/fs-utils';
|
|
|
|
export async function GET(request: Request) {
|
|
const { searchParams } = new URL(request.url);
|
|
const project = searchParams.get('project');
|
|
const version = searchParams.get('version');
|
|
const commitId = searchParams.get('commit') || undefined;
|
|
|
|
if (!project || !version) {
|
|
return NextResponse.json(
|
|
{ error: 'Project and version parameters are required' },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
try {
|
|
const apks = await getApks(project, version, commitId);
|
|
const apksWithUrls = apks.map(apk => ({
|
|
...apk,
|
|
modifiedAt: apk.modifiedAt.toISOString(),
|
|
downloadUrl: `/api/download?project=${encodeURIComponent(project)}&version=${encodeURIComponent(version)}&filename=${encodeURIComponent(apk.name)}`,
|
|
}));
|
|
return NextResponse.json(apksWithUrls);
|
|
} catch (error) {
|
|
return NextResponse.json(
|
|
{ error: 'Failed to fetch APK files' },
|
|
{ status: 500 }
|
|
);
|
|
}
|
|
}
|