From 29fbc1c938d097e107ce3ab5c8326e3ae5157fce Mon Sep 17 00:00:00 2001
From: martin-mfg <2026226+martin-mfg@users.noreply.github.com>
Date: Wed, 21 May 2025 22:16:45 +0200
Subject: [PATCH] add ',' to safe characters

---
 api/index.js | 2 +-
 api/pin.js   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/index.js b/api/index.js
index 34ecff82..ef1aa738 100644
--- a/api/index.js
+++ b/api/index.js
@@ -67,7 +67,7 @@ export default async (req, res) => {
     );
   }
 
-  const safePattern = /^[\w\/.-]+$/;
+  const safePattern = /^[-\w\/.,]+$/;
   if (
     (username && !safePattern.test(username)) ||
     (repos && !safePattern.test(repos)) ||
diff --git a/api/pin.js b/api/pin.js
index 69c86f0b..3e6ada93 100644
--- a/api/pin.js
+++ b/api/pin.js
@@ -59,7 +59,7 @@ export default async (req, res) => {
     );
   }
 
-  const safePattern = /^[\w\/.-]+$/;
+  const safePattern = /^[-\w\/.,]+$/;
   if (
     (username && !safePattern.test(username)) ||
     (repo && !safePattern.test(repo))