From 1f2b0acb60320e769a9af8787cd828e2c42f42f7 Mon Sep 17 00:00:00 2001
From: Philip H <47042125+pheiduck@users.noreply.github.com>
Date: Sun, 21 Jan 2024 14:37:22 +0100
Subject: [PATCH] fixup:  Prototype-polluting assignment for ipv6

---
 src/lib/Server.js | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/src/lib/Server.js b/src/lib/Server.js
index 94fbc98a..e7cb3ea0 100644
--- a/src/lib/Server.js
+++ b/src/lib/Server.js
@@ -158,11 +158,6 @@ module.exports = class Server {
         const { name } = req.body;
         return WireGuard.updateClientName({ clientId, name });
       }))
-      .put('/api/wireguard/client/:clientId/address6', Util.promisify(async (req) => {
-        const { clientId } = req.params;
-        const { address6 } = req.body;
-        return WireGuard.updateClientAddress6({ clientId, address6 });
-      }))
       .put('/api/wireguard/client/:clientId/address', Util.promisify(async (req, res) => {
         const { clientId } = req.params;
         if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
@@ -171,6 +166,14 @@ module.exports = class Server {
         const { address } = req.body;
         return WireGuard.updateClientAddress({ clientId, address });
       }))
+       .put('/api/wireguard/client/:clientId/address6', Util.promisify(async (req) => {
+        const { clientId } = req.params;
+        if (clientId === '__proto__' || clientId === 'constructor' || clientId === 'prototype') {
+          res.end(403);
+        }
+        const { address6 } = req.body;
+        return WireGuard.updateClientAddress6({ clientId, address6 });
+      }))
 
       .listen(PORT, WEBUI_HOST, () => {
         debug(`Listening on http://${WEBUI_HOST}:${PORT}`);