fix: sanitizes global find query params

This commit is contained in:
Jarrod Flesch
2022-12-08 08:39:10 -05:00
parent 471d21410a
commit 512bc1ebe6
2 changed files with 4 additions and 2 deletions

View File

@@ -4,6 +4,7 @@ import { PayloadRequest } from '../../express/types';
import { SanitizedGlobalConfig } from '../config/types';
import { Document } from '../../types';
import findOne from '../operations/findOne';
import { isNumber } from '../../utilities/isNumber';
export type FindOneGlobalResult = Promise<Response<Document> | void>;
export type FindOneGlobalResponse = (req: PayloadRequest, res: Response, next: NextFunction) => FindOneGlobalResult;
@@ -17,7 +18,7 @@ export default function findOneHandler(globalConfig: SanitizedGlobalConfig): Fin
req,
globalConfig,
slug,
depth: Number(req.query.depth),
depth: isNumber(req.query?.depth) ? Number(req.query.depth) : undefined,
draft: req.query.draft === 'true',
});

View File

@@ -1,6 +1,7 @@
import { Response, NextFunction } from 'express';
import { PayloadRequest } from '../../express/types';
import { Document } from '../../types';
import { isNumber } from '../../utilities/isNumber';
import { SanitizedGlobalConfig } from '../config/types';
import findVersionByID from '../operations/findVersionByID';
@@ -10,7 +11,7 @@ export default function findVersionByIDHandler(globalConfig: SanitizedGlobalConf
req,
globalConfig,
id: req.params.id,
depth: Number(req.query.depth),
depth: isNumber(req.query?.depth) ? Number(req.query.depth) : undefined,
};
try {