address audit findings: schedule validation, settings json guard, pipeline types, a11y labels

2026-04-13 15:48:55 +02:00
parent c0bcbaec1b
commit c5ea37aab9
13 changed files with 161 additions and 37 deletions
@@ -95,7 +95,11 @@ app.get("/schedule", (c) => {

 app.patch("/schedule", async (c) => {
 	const body = await c.req.json<Partial<ScheduleConfig>>();
-	updateScheduleConfig(body);
+	try {
+		updateScheduleConfig(body);
+	} catch (e) {
+		return c.json({ error: e instanceof Error ? e.message : String(e) }, 400);
+	}
 	return c.json(getScheduleConfig());
 });