From 00bc92a2e13de383758d0ea194a62b56dbf7632d Mon Sep 17 00:00:00 2001
From: undefined <i@undefined.moe>
Date: Sun, 28 Aug 2022 00:20:48 +0800
Subject: [PATCH] core: fix UserContext json

---
 packages/hydrooj/package.json                   | 2 +-
 packages/hydrooj/src/service/layers/response.ts | 5 ++---
 packages/hydrooj/src/settings.ts                | 1 +
 packages/ui-default/package.json                | 3 +++
 4 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/packages/hydrooj/package.json b/packages/hydrooj/package.json
index 4994f76f7..96be28033 100644
--- a/packages/hydrooj/package.json
+++ b/packages/hydrooj/package.json
@@ -1,6 +1,6 @@
 {
     "name": "hydrooj",
-    "version": "3.16.4",
+    "version": "3.16.5",
     "bin": "bin/hydrooj.js",
     "main": "src/loader",
     "module": "src/loader",
diff --git a/packages/hydrooj/src/service/layers/response.ts b/packages/hydrooj/src/service/layers/response.ts
index c7b72ead4..b2bc5da4c 100644
--- a/packages/hydrooj/src/service/layers/response.ts
+++ b/packages/hydrooj/src/service/layers/response.ts
@@ -12,11 +12,10 @@ const serializer = (showDisplayName = false) => (k: string, v: any) => {
 };
 
 export default (logger) => async (ctx: KoaContext, next) => {
-    const {
-        request, response, UiContext, user, args,
-    } = ctx.HydroContext;
+    const { request, response } = ctx.HydroContext;
     try {
         await next();
+        const { UiContext, user, args } = ctx.HydroContext;
         if (response.redirect) {
             response.body ||= {};
             response.body.url = response.redirect;
diff --git a/packages/hydrooj/src/settings.ts b/packages/hydrooj/src/settings.ts
index d7d1cb361..858edfc12 100644
--- a/packages/hydrooj/src/settings.ts
+++ b/packages/hydrooj/src/settings.ts
@@ -67,6 +67,7 @@ export async function saveConfig(config: any) {
 }
 export async function setConfig(key: string, value: any) {
     const path = key.split('.');
+    if (path.filter((i) => ['__proto__', 'prototype'].includes(i)).length) throw new Error('Invalid key');
     const t = path.pop();
     let cursor = systemConfig;
     for (const p of path) {
diff --git a/packages/ui-default/package.json b/packages/ui-default/package.json
index 94a0e63a4..d09719016 100644
--- a/packages/ui-default/package.json
+++ b/packages/ui-default/package.json
@@ -6,6 +6,9 @@
   "main": "hydro.js",
   "repository": "https://github.com/hydro-dev/Hydro.git",
   "preferUnplugged": true,
+  "scripts": {
+    "lint": "eslint"
+  },
   "devDependencies": {
     "@blueprintjs/core": "^4.9.3",
     "@fontsource/dm-mono": "^4.5.9",