Simon/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-06-28 14:56:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-j7wh-x834-p3r7

Browse Source 
Signed-off-by: Daniel <845765@qq.com>
This commit is contained in:
Daniel
2026-03-14 19:38:58 +08:00
parent 4b530b5d8a
commit d5e2d0bce0
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
kernel/api/search.go
View File

@@ -396,6 +396,14 @@ func fullTextSearchBlock(c *gin.Context) {
}
page, pageSize, query, paths, boxes, types, method, orderBy, groupBy := parseSearchBlockArgs(arg)
// SQL mode requires admin privileges, consistent with /api/query/sql
if method == 2 && !model.IsAdminRoleContext(c) {
ret.Code = -1
ret.Msg = "SQL search requires administrator privileges"
return
}
blocks, matchedBlockCount, matchedRootCount, pageCount, docMode := model.FullTextSearchBlock(query, boxes, paths, types, method, orderBy, groupBy, page, pageSize)
if model.IsReadOnlyRoleContext(c) {
publishAccess := model.GetPublishAccess()