From b91ff42bb8556cf7964b91c33e28e4d794339717 Mon Sep 17 00:00:00 2001
From: Thomas Hobson <git@hexf.me>
Date: Sat, 27 Feb 2021 23:10:54 +1300
Subject: [PATCH] api: fix validators

---
 api/src/executor/routes.js | 7 +++++--
 api/src/ppman/routes.js    | 2 +-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/api/src/executor/routes.js b/api/src/executor/routes.js
index a69aeeb..7d65b6b 100644
--- a/api/src/executor/routes.js
+++ b/api/src/executor/routes.js
@@ -10,7 +10,8 @@ module.exports = {
         body('language')
             .isString(), // eslint-disable-line snakecasejs/snakecasejs
         body('version')
-            .isSemVer(), // eslint-disable-line snakecasejs/snakecasejs
+            .isString(), // eslint-disable-line snakecasejs/snakecasejs
+                         // isSemVer requires it to be a version, not a selector
         body('files')
             .isArray(), // eslint-disable-line snakecasejs/snakecasejs
         body('files.*.name')
@@ -20,7 +21,9 @@ module.exports = {
             .contains('/'),
         body('files.*.content')
             .isString(), // eslint-disable-line snakecasejs/snakecasejs
-        body('*_timeout')
+        body('compile_timeout')
+            .isNumeric(), // eslint-disable-line snakecasejs/snakecasejs
+        body('run_timeout')
             .isNumeric(), // eslint-disable-line snakecasejs/snakecasejs
         body('stdin')
             .isString(), // eslint-disable-line snakecasejs/snakecasejs
diff --git a/api/src/ppman/routes.js b/api/src/ppman/routes.js
index 86a45e7..a14fcf0 100644
--- a/api/src/ppman/routes.js
+++ b/api/src/ppman/routes.js
@@ -52,7 +52,7 @@ module.exports = {
         body('url')
             .notEmpty() // eslint-disable-line snakecasejs/snakecasejs
             .bail()
-            .isURL({require_protocol: true}) // eslint-disable-line snakecasejs/snakecasejs
+            .isURL({require_host: false, require_protocol: true, protocols: ['http','https','file']}) // eslint-disable-line snakecasejs/snakecasejs
 
     ],
     async repo_add(req, res){