agent-security-engineer/freno-dev
1
0
Fork 0
forked from Mike/freno-dev
Code Pull Requests Activity

input halo sections, sparkle handling

Browse Source
This commit is contained in:
Michael Freno
2026-04-30 06:38:54 -04:00
parent 3635133994
commit 8b6551330f
4 changed files with 153 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/routes/api/downloads/[filename].ts
View File

@@ -3,12 +3,12 @@ import { S3Client, GetObjectCommand } from "@aws-sdk/client-s3";
import { env } from "~/env/server";
/**
* Serves Gaze DMG files and delta updates from S3
* Serves macOS app DMG files and delta updates from S3
* This endpoint is used by Sparkle updater to download updates
*
* Handles:
* - Full DMG files: /api/downloads/Gaze-0.2.2.dmg
* - Delta updates: /api/downloads/Gaze3-2.delta
* - Full DMG files: /api/downloads/Gaze-0.2.2.dmg, /api/downloads/InputHalo-0.1.0.dmg
* - Delta updates: /api/downloads/Gaze3-2.delta, /api/downloads/InputHalo3-2.delta
*
* URL: https://freno.me/api/downloads/[filename]
*/
@@ -24,9 +24,11 @@ export async function GET(event: APIEvent) {
});
}
// Validate filename format (only allow Gaze files)
// Validate filename format (only allow Gaze or InputHalo files)
const validPrefixes = ["Gaze", "InputHalo"];
const isValidPrefix = validPrefixes.some((prefix) => filename.startsWith(prefix));
if (
!filename.startsWith("Gaze") ||
!isValidPrefix ||
(!filename.endsWith(".dmg") && !filename.endsWith(".delta"))
) {
return new Response("Invalid file format", {