File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -513,7 +513,18 @@ const reportRequestHandler = async (request, h) => {
513513 const message = `Missing required parameters : ${missingParams . join ( ', ' ) } ( 101 ) `
514514 const payload = { messageList: [{ code: 'SBAPI.Error.BadRequest', message }] }
515515 return h.response(payload).type('application/json').code(400)
516- }
516+ if (!reportConfig) {
517+ const payload = { messageList: [{ code: 'SBAPI.Error.BadRequest', message: 'Invalid report type provided (100)' }] }
518+ return h.response(payload).type('application/json').code(400)
519+ }
520+
521+ // Validate required parameters are present
522+ const missingParams = reportConfig.params.filter(param => !request.query[param])
523+ if (missingParams.length > 0) {
524+ const message = ` Missing required parameters : ${missingParams . join ( ', ' ) } ( 101 ) `
525+ const payload = { messageList: [{ code: 'SBAPI.Error.BadRequest', message }] }
526+ return h.response(payload).type('application/json').code(400)
527+ }
517528
518529 // SECURITY: Basic input sanitization could be added here to validate the format
519530 // of parameters like 'uid' or 'ikey' before passing them to the ILSWS API.
You can’t perform that action at this time.
0 commit comments