fix(server): read file permission checks (#3046)

This commit is contained in:
Jason Rasmussen
2023-06-30 12:25:08 -04:00
committed by GitHub
parent ad343b7b32
commit 455a36b0fc
5 changed files with 11 additions and 12 deletions

View File

@@ -112,7 +112,7 @@ export class UserCore {
if (!user.profileImagePath) {
throw new NotFoundException('User does not have a profile image');
}
await fs.access(user.profileImagePath, constants.R_OK | constants.W_OK);
await fs.access(user.profileImagePath, constants.R_OK);
return createReadStream(user.profileImagePath);
}