fix: guard checkHoneypot against undefined body (req.body before body parsers)

ddrayko · ddrayko · commit cad0fbf4e4ee · 2026-07-21T14:47:26.000+02:00
diff --git a/services/security.js b/services/security.js
@@ -588,6 +588,7 @@ export function isKnownBotIp(ip) {
 }
 
 export function checkHoneypot(body) {
+  if (!body || typeof body !== 'object') return { triggered: false };
   const honeypotFields = ['website', 'url', 'homepage', 'message2', 'confirm_email', 'fax', 'phone2'];
   for (const field of honeypotFields) {
     if (body[field] !== undefined && body[field] !== '' && body[field] !== null) {

Original file line number	Diff line number	Diff line change
`@@ -588,6 +588,7 @@ export function isKnownBotIp(ip) {`
`588`	`588`	`}`
`589`	`589`
`590`	`590`	`export function checkHoneypot(body) {`
	`591`	`+ if (!body \|\| typeof body !== 'object') return { triggered: false };`
`591`	`592`	`const honeypotFields = ['website', 'url', 'homepage', 'message2', 'confirm_email', 'fax', 'phone2'];`
`592`	`593`	`for (const field of honeypotFields) {`
`593`	`594`	`if (body[field] !== undefined && body[field] !== '' && body[field] !== null) {`