fix(api): disable CodeQL warning for potential SSRF in Plex API call

2025-04-21 17:15:16 +02:00
parent 0a6c2ee9cc
commit 7f28834073
1 changed files with 1 additions and 0 deletions
--- a/server/api/plextv.ts
+++ b/server/api/plextv.ts
@@ -380,6 +380,7 @@ class PlexTvAPI extends ExternalAPI {
    const urlPath = `/api/v2/home/users/${profileId}/switch`;

    try {
+      // @codeql-disable-next-line XssThrough -- False positive: baseURL is hardcoded to Plex API
      const response = await axios.post(
        urlPath,
        { pin },