Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: add basic sanity-checking to middleware.validateActivity

Browse Source
This commit is contained in:
Julian Lam
2023-12-06 13:57:49 -05:00
parent cc0d18869a
commit 99cc60c8d5
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/middleware/index.js
View File

@@ -338,5 +338,11 @@ middleware.validateActivity = helpers.try(async (req, res, next) => {
return res.sendStatus(400); return res.sendStatus(400);
} }
// Sanity-check payload schema
const required = ['type'];
if (!required.every(prop => req.body.hasOwnProperty(prop))) {
return res.sendStatus(400);
}
next(); next();
}); });