fix: harden backend synchronization

2026-06-02 21:06:25 +02:00
parent 4b531a4c24
commit 64b62a5793
20 changed files with 254 additions and 16 deletions
@@ -14,6 +14,7 @@ return static function (AppContext $ctx): void {
            $ctx->requireCsrf('update:' . $id);
            $input = normalize_rule_post($_POST);
            $patch = attach_rule_scope($ctx, RuleValidator::validate($input, $ctx->settings));
+            enforce_rule_backend_constraints($ctx, $id, $patch);
            $ctx->rules->update($ctx->daUser->username(), $id, $patch);
            $ctx->syncActiveBackend();
            Http::redirect($ctx->url('index.html', ['status' => 'updated']));