From d61479ec723345125eb70262aa3795fc194432d0 Mon Sep 17 00:00:00 2001 From: Demian Katz Date: Tue, 6 Jan 2026 11:55:02 -0500 Subject: [PATCH] Escape literal asterisk in delete image route. --- api/src/routes/ingest.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/api/src/routes/ingest.ts b/api/src/routes/ingest.ts index f2554dd7..270ba5ae 100644 --- a/api/src/routes/ingest.ts +++ b/api/src/routes/ingest.ts @@ -97,9 +97,9 @@ ingest.get("/:category/:job/:image/:size", sanitizeParameters(), requireToken, a }); ingest.delete( - "/:category/:job/:image/*", + "/:category/:job/:image/\\*", ingest.delete( - "/:category/:job/:image/*", + "/:category/:job/:image/\\*", sanitizeParameters({ 0: /^\*$/ }), requireToken, async function (req, res) {