Harden url validation in logo endpoint

2 months ago · 5558e8990b
1 changed files with 1 additions and 1 deletions
--- a/apps/api/src/app/logo/logo.service.ts
+++ b/apps/api/src/app/logo/logo.service.ts
@ -47,7 +47,7 @@ export class LogoService {
  private async getBuffer(aUrl: string) {
    const blob = await this.fetchService
      .fetch(
-        `https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=${encodeURIComponent(aUrl)}&size=64`,
+        `https://t0.gstatic.com/faviconV2?client=SOCIAL&fallback_opts=TYPE,SIZE,URL&size=64&type=FAVICON&url=${encodeURIComponent(aUrl)}`,
        {
          headers: { 'User-Agent': 'request' },
          signal: AbortSignal.timeout(