diff --git a/crates/lanspread-tauri-deno-ts/src-tauri/src/lib.rs b/crates/lanspread-tauri-deno-ts/src-tauri/src/lib.rs index aa05182..43e336a 100644 --- a/crates/lanspread-tauri-deno-ts/src-tauri/src/lib.rs +++ b/crates/lanspread-tauri-deno-ts/src-tauri/src/lib.rs @@ -1539,13 +1539,17 @@ async fn get_game_thumbnail( use base64::Engine; let _app_invoke = enter_app_invoke(state.inner())?; + if !is_single_component_game_id(&game_id) { + log::warn!("Ignoring thumbnail request for invalid game id: {game_id}"); + return Err( + std::io::Error::new(std::io::ErrorKind::InvalidInput, "invalid game id").into(), + ); + } let resource_path = app_handle.path().resolve( format!("assets/{game_id}.jpg"), tauri::path::BaseDirectory::Resource, )?; - dbg!(&resource_path); - let image_data = scoped_blocking(|| std::fs::read(&resource_path))?; let base64_data = base64::engine::general_purpose::STANDARD.encode(&image_data); Ok(format!("data:image/jpeg;base64,{base64_data}"))