fix: sanitize MONGODB_URI scheme validation in db-mongodb.js

2026-08-10 07:41:04 +00:00
parent bd491fcda1
commit 4f91be13f6
1 changed files with 10 additions and 2 deletions
@@ -13,7 +13,14 @@ export function generateUUID() {
  });
 }

-const MONGODB_URI = process.env.MONGODB_URI || 'mongodb://127.0.0.1:27017';
+function getMongoUri() {
+  const envUri = (process.env.MONGODB_URI || '').trim();
+  if (envUri.startsWith('mongodb://') || envUri.startsWith('mongodb+srv://')) {
+    return envUri;
+  }
+  return 'mongodb://127.0.0.1:27017';
+}
+
 const DB_NAME = process.env.DB_NAME || 'hospital';

 let client;
@@ -62,7 +69,8 @@ const memStore = {

 export async function initDb() {
  try {
-    client = new MongoClient(MONGODB_URI, {
+    const uri = getMongoUri();
+    client = new MongoClient(uri, {
      connectTimeoutMS: 5000,
      serverSelectionTimeoutMS: 5000
    });