Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Malformatted API query parameter values resulting in server errors. #3063

Closed
SychO9 opened this issue Sep 1, 2021 · 0 comments · Fixed by #3064
Closed

Malformatted API query parameter values resulting in server errors. #3063

SychO9 opened this issue Sep 1, 2021 · 0 comments · Fixed by #3064
Assignees
Milestone

Comments

@SychO9
Copy link
Member

SychO9 commented Sep 1, 2021

If you pass for example ?page[limit]=% to an API endpoint, that results in a server error because the the value is currently not sanitised to be an integer.

We need to check all extraction methods on the AbstractSerializeController and make sure all values are sanitised. While there is currently no risk, user input should not be resulting in server errors.

@SychO9 SychO9 added this to the 1.1 milestone Sep 1, 2021
@SychO9 SychO9 self-assigned this Sep 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant