fix: sanitize MONGODB_URI scheme validation in db-mongodb.js

This commit is contained in:
2026-08-10 07:41:04 +00:00
parent bd491fcda1
commit 4f91be13f6
+10 -2
View File
@@ -13,7 +13,14 @@ export function generateUUID() {
}); });
} }
const MONGODB_URI = process.env.MONGODB_URI || 'mongodb://127.0.0.1:27017'; function getMongoUri() {
const envUri = (process.env.MONGODB_URI || '').trim();
if (envUri.startsWith('mongodb://') || envUri.startsWith('mongodb+srv://')) {
return envUri;
}
return 'mongodb://127.0.0.1:27017';
}
const DB_NAME = process.env.DB_NAME || 'hospital'; const DB_NAME = process.env.DB_NAME || 'hospital';
let client; let client;
@@ -62,7 +69,8 @@ const memStore = {
export async function initDb() { export async function initDb() {
try { try {
client = new MongoClient(MONGODB_URI, { const uri = getMongoUri();
client = new MongoClient(uri, {
connectTimeoutMS: 5000, connectTimeoutMS: 5000,
serverSelectionTimeoutMS: 5000 serverSelectionTimeoutMS: 5000
}); });