Skip to content

Commit 43a50a1

Browse files
authored
Merge pull request #63 from akaday/alert-autofix-19
Fix code scanning alert no. 19: Type confusion through parameter tampering
2 parents acbe25c + e41e485 commit 43a50a1

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

fixtures/flight/server/region.js

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -246,6 +246,10 @@ if (process.env.NODE_ENV === 'development') {
246246
try {
247247
res.set('Content-type', 'application/json');
248248
let requestedFilePath = req.query.name;
249+
if (typeof requestedFilePath !== 'string') {
250+
res.status(400).send("Bad request");
251+
return;
252+
}
249253

250254
let isCompiledOutput = false;
251255
if (requestedFilePath.startsWith('file://')) {

0 commit comments

Comments
 (0)