mass assignment vulnerabilites and refactoring of photos

2025-12-12 13:57:44 -05:00
parent 1dee5232a0
commit 25bbf5d20b
5 changed files with 79 additions and 5 deletions
--- a/backend/services/damageAssessmentService.js
+++ b/backend/services/damageAssessmentService.js
@@ -19,7 +19,7 @@ class DamageAssessmentService {
      replacementCost,
      proofOfOwnership,
      actualReturnDateTime,
-      photos = [],
+      imageFilenames = [],
    } = damageInfo;

    const rental = await Rental.findByPk(rentalId, {
@@ -98,7 +98,7 @@ class DamageAssessmentService {
      needsReplacement,
      replacementCost: needsReplacement ? parseFloat(replacementCost) : null,
      proofOfOwnership: proofOfOwnership || [],
-      photos,
+      imageFilenames,
      assessedAt: new Date(),
      assessedBy: userId,
      feeCalculation,