fix: issues found in security audit (#1668)

2024-12-15 21:16:42 +01:00
parent 032509e462
commit 922101dcbd
15 changed files with 70 additions and 27 deletions
--- a/packages/api/src/router/widgets/notebook.ts
+++ b/packages/api/src/router/widgets/notebook.ts
@@ -5,10 +5,10 @@ import { eq } from "@homarr/db";
 import { items } from "@homarr/db/schema/sqlite";
 import { z } from "@homarr/validation";

-import { createTRPCRouter, publicProcedure } from "../../trpc";
+import { createTRPCRouter, protectedProcedure } from "../../trpc";

 export const notebookRouter = createTRPCRouter({
-  updateContent: publicProcedure
+  updateContent: protectedProcedure
    .input(
      z.object({
        itemId: z.string(),