Add null check validation for primeID before parsing

Co-authored-by: cubap <1119165+cubap@users.noreply.github.com>

Author: Copilot

controllers/delete.js

@@ -224,10 +224,13 @@ async function getAllVersions(obj) {
     let rootObj
     if (primeID === "root") {
         rootObj = JSON.parse(JSON.stringify(obj))
-    } else {
+    } else if (primeID) {
         //Use _id for indexed query performance instead of @id
         const primeHexId = parseDocumentID(primeID)
         rootObj = await db.findOne({"$or":[{"_id": primeHexId}, {"__rerum.slug": primeHexId}]})
+    } else {
+        //primeID is undefined or null, cannot proceed
+        throw new Error("Object has no valid history.prime value")
     }
     ls_versions = await db.find({ "__rerum.history.prime": rootObj['@id'] }).toArray()
     ls_versions.unshift(rootObj)

controllers/utils.js

@@ -202,11 +202,14 @@ async function getAllVersions(obj) {
     if (primeID === "root") {
         //The obj passed in is root.  So it is the rootObj we need.
         rootObj = JSON.parse(JSON.stringify(obj))
-    } else {
+    } else if (primeID) {
         //The obj passed in knows the ID of root, grab it from Mongo
         //Use _id for indexed query performance instead of @id
         const primeHexId = parseDocumentID(primeID)
         rootObj = await db.findOne({"$or":[{"_id": primeHexId}, {"__rerum.slug": primeHexId}]})
+    } else {
+        //primeID is undefined or null, cannot proceed
+        throw new Error("Object has no valid history.prime value")
     }
     //All the children of this object will have its @id in __rerum.history.prime
     ls_versions = await db.find({ "__rerum.history.prime": rootObj['@id'] }).toArray()