fix: don't allow to create record in any resource

AdminForth/1731/security-audit

Author: yaroslav8765

index.ts

@@ -69,6 +69,9 @@ export default class InlineCreatePlugin extends AdminForthPlugin {
       handler: async ({ body, adminUser }) => {
         const { record, resourceId } = body;
 
+        if ( this.resourceConfig.resourceId !== resourceId) {
+          return { error: 'Resource ID mismatch' };
+        }
         const resource = this.adminforth.config.resources.find(r => r.resourceId === resourceId);
 
         const cleanRecord = resource.columns.reduce((acc, field) => {