KevinMidboe/immich
1
0
Fork 0
mirror of https://github.com/KevinMidboe/immich.git synced 2025-10-29 17:40:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(server): do not leak people (#4710)

Browse Source
This commit is contained in:
martin
2023-10-30 09:44:05 +01:00
committed by GitHub
parent 512f672e9e
commit cc3149c520
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
server/src/infra/repositories/person.repository.ts
View File

@@ -103,15 +103,18 @@ export class PersonRepository implements IPersonRepository {
return this.personRepository.findOne({ where: { id: personId } }); return this.personRepository.findOne({ where: { id: personId } });
} }
getByName(userId: string, personName: string, { withHidden }: PersonNameSearchOptions): Promise<PersonEntity[]> { async getByName(
userId: string,
personName: string,
{ withHidden }: PersonNameSearchOptions,
): Promise<PersonEntity[]> {
const queryBuilder = this.personRepository const queryBuilder = this.personRepository
.createQueryBuilder('person') .createQueryBuilder('person')
.leftJoin('person.faces', 'face') .leftJoin('person.faces', 'face')
.where('person.ownerId = :userId', { userId }) .where(
.andWhere('LOWER(person.name) LIKE :nameStart OR LOWER(person.name) LIKE :nameAnywhere', { 'person.ownerId = :userId AND (LOWER(person.name) LIKE :nameStart OR LOWER(person.name) LIKE :nameAnywhere)',
nameStart: `${personName.toLowerCase()}%`, { userId, nameStart: `${personName.toLowerCase()}%`, nameAnywhere: `% ${personName.toLowerCase()}%` },
nameAnywhere: `% ${personName.toLowerCase()}%`, )
})
.groupBy('person.id') .groupBy('person.id')
.orderBy('COUNT(face.assetId)', 'DESC') .orderBy('COUNT(face.assetId)', 'DESC')
.limit(20); .limit(20);