feat: another security sweep

2026-02-04 22:02:24 -08:00
parent 5eae636f2f
commit 9caf74945a
10 changed files with 416 additions and 36 deletions
@@ -136,6 +136,11 @@ const likesRoutes: FastifyPluginAsync = async (app) => {
        return { error: "Items array is required" };
      }

+      if (items.length > 100) {
+        reply.code(400);
+        return { error: "Maximum 100 items allowed per request" };
+      }
+
      const validTypes = ['book', 'game', 'show', 'manga', 'music', 'art'];
      const results = await Promise.all(
        items.map(async (item) => {