From a89d5befd4ba158330738f1b21c4abe134e7b8aa Mon Sep 17 00:00:00 2001 From: zanllp Date: Sun, 15 Mar 2026 13:07:22 +0800 Subject: [PATCH] fix(api): add write permission requirement for update_exif endpoint --- scripts/iib/api.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/iib/api.py b/scripts/iib/api.py index eb460bf..6b0b985 100644 --- a/scripts/iib/api.py +++ b/scripts/iib/api.py @@ -877,7 +877,7 @@ def infinite_image_browsing_api(app: FastAPI, **kwargs): path: str exif: str - @app.post(api_base + "/update_exif", dependencies=[Depends(verify_secret)]) + @app.post(api_base + "/update_exif", dependencies=[Depends(verify_secret), Depends(write_permission_required)]) async def update_exif(req: UpdateExifReq): """更新图片/视频的 exif 信息""" conn = DataBase.get_conn()