MrUnknownDE/panel
1
0
Fork 0
mirror of https://github.com/MrUnknownDE/panel.git synced 2026-04-18 22:33:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Improve client API route model binding and prevent accidental route access without valid model binds

Browse Source
This commit is contained in:
Dane Everitt
2021-08-04 22:20:43 -07:00
parent e1089e0b73
commit 4d1a7e6637
4 changed files with 119 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/Api/Client/Servers/ScheduleController.php
View File

@@ -88,10 +88,6 @@ class ScheduleController extends ClientApiController
*/
public function view(ViewScheduleRequest $request, Server $server, Schedule $schedule): array
{
if ($schedule->server_id !== $server->id) {
throw new NotFoundHttpException();
}
$schedule->loadMissing('tasks');
return $this->fractal->item($schedule)