Threads integration updating verifyLInk api / answerAbos and tiktok api v2 #289
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| const threadsAbos = async (idPost, id, userName) => { | ||
| try { | ||
| var followers = 0 | ||
| var campaign_link = await CampaignLink.findOne({ idPost }).lean() |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources High
| @@ -1393,4 +1396,11 @@ | |||
| router.get('/Tiktok/ProfilPrivacy', verifyAuth, ProfilPrivacy) | |||
|
|
|||
|
|
|||
| router.get('/check/threads-account',verifyAuth,checkThreads) | |||
Check failure
Code scanning / CodeQL
Missing rate limiting High
| @@ -1393,4 +1396,11 @@ | |||
| router.get('/Tiktok/ProfilPrivacy', verifyAuth, ProfilPrivacy) | |||
|
|
|||
|
|
|||
| router.get('/check/threads-account',verifyAuth,checkThreads) | |||
Check failure
Code scanning / CodeQL
Missing rate limiting High
| @@ -1393,4 +1396,11 @@ | |||
| router.get('/Tiktok/ProfilPrivacy', verifyAuth, ProfilPrivacy) | |||
|
|
|||
|
|
|||
| router.get('/check/threads-account',verifyAuth,checkThreads) | |||
|
|
|||
| router.get('/add/threads-account', verifyAuth, addThreadsAccount) | |||
Check failure
Code scanning / CodeQL
Missing rate limiting High
| @@ -1393,4 +1396,11 @@ | |||
| router.get('/Tiktok/ProfilPrivacy', verifyAuth, ProfilPrivacy) | |||
|
|
|||
|
|
|||
| router.get('/check/threads-account',verifyAuth,checkThreads) | |||
|
|
|||
| router.get('/add/threads-account', verifyAuth, addThreadsAccount) | |||
Check failure
Code scanning / CodeQL
Missing rate limiting High
|
|
||
| exports.verifyThread = async (idPost, threads_id) => { | ||
| try { | ||
| const res = await axios.get(`https://www.threads.net/t/${idPost}`); |
Check failure
Code scanning / CodeQL
Server-side request forgery Critical
|
|
||
| router.get('/add/threads-account', verifyAuth, addThreadsAccount) | ||
|
|
||
| router.delete('/remove/threads-account/:id', verifyAuth, idThreadsAccountValidation,removeThreadsAccount) |
Check failure
Code scanning / CodeQL
Missing rate limiting High
|
|
||
| router.get('/add/threads-account', verifyAuth, addThreadsAccount) | ||
|
|
||
| router.delete('/remove/threads-account/:id', verifyAuth, idThreadsAccountValidation,removeThreadsAccount) |
Check failure
Code scanning / CodeQL
Missing rate limiting High
Tiktok api v2 integration instead of the v1 version that will become deprecated.
adding verifyThread function in verifyLink api to check the thread Url from client
adding threadsAbos function in aswerAbos to fetch user account followers_count
adding check/insta api to check if a user has an instagram account so we'll allow him to add a threads account