From d46152597859391dae8a4dcd2d12812e8307b22b Mon Sep 17 00:00:00 2001 From: Rishabh Date: Wed, 26 Jan 2022 16:52:10 +0530 Subject: [PATCH] Updated validation for post/page refs https://github.com/TryGhost/Team/issues/1071 - ignores `tiers` as its a valid visibility filter --- core/server/api/canary/utils/validators/input/pages.js | 2 +- core/server/api/canary/utils/validators/input/posts.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/core/server/api/canary/utils/validators/input/pages.js b/core/server/api/canary/utils/validators/input/pages.js index ca532276b3..a70198f1b6 100644 --- a/core/server/api/canary/utils/validators/input/pages.js +++ b/core/server/api/canary/utils/validators/input/pages.js @@ -16,7 +16,7 @@ const validateVisibility = async function (frame) { const visibility = frame.data.pages[0].visibility; const visibilityFilter = frame.data.pages[0].visibility_filter; if (visibility) { - if (!['public', 'members', 'paid'].includes(visibility)) { + if (!['public', 'members', 'paid', 'tiers'].includes(visibility)) { // check filter is valid try { await models.Member.findPage({filter: visibilityFilter, limit: 1}); diff --git a/core/server/api/canary/utils/validators/input/posts.js b/core/server/api/canary/utils/validators/input/posts.js index a0d8406e0e..13a2a30a21 100644 --- a/core/server/api/canary/utils/validators/input/posts.js +++ b/core/server/api/canary/utils/validators/input/posts.js @@ -16,7 +16,7 @@ const validateVisibility = async function (frame) { const visibility = frame.data.posts[0].visibility; const visibilityFilter = frame.data.posts[0].visibility_filter; if (visibility) { - if (!['public', 'members', 'paid'].includes(visibility)) { + if (!['public', 'members', 'paid', 'tiers'].includes(visibility)) { // check filter is valid try { await models.Member.findPage({filter: visibilityFilter, limit: 1});