fix(security): prevent potential prototype pollution via request body filter (#1388)

* fix(security): prevent potential pollution of request body being executed * An array is expected
2023-02-20 15:03:02 +00:00
parent 5880356396
commit 787e85605c
1 changed files with 1 additions and 1 deletions
@@ -182,7 +182,7 @@ exports.init = async (app) => {
      }

      const bq = await getAllStreamBlobIds({ streamId: req.params.streamId })
-      const unknownBlobIds = req.body.filter(
+      const unknownBlobIds = [...req.body].filter(
        (id) => bq.findIndex((bInfo) => bInfo.id === id) === -1
      )
      res.send(unknownBlobIds)