Merge pull request #179 from ptrumpis/alert-autofix-15

ptrumpis · web-flow · commit f4a248e36ecc · 2025-01-30T16:01:51.000+01:00
Potential fix for code scanning alert no. 15: Type confusion through parameter tampering
diff --git a/src/endpoints/import/cache.js b/src/endpoints/import/cache.js
@@ -39,7 +39,7 @@ const formMiddleWare = (req, res, next) => {
             }
         }
 
-        req.files = allFiles;
+        req.files = Array.isArray(allFiles) ? allFiles : [allFiles];
         req.allowOverwrite = fields.allow_overwrite === 'true';
 
         next();

Original file line number	Diff line number	Diff line change
`@@ -39,7 +39,7 @@ const formMiddleWare = (req, res, next) => {`
`39`	`39`	`}`
`40`	`40`	`}`
`41`	`41`
`42`		`- req.files = allFiles;`
	`42`	`+ req.files = Array.isArray(allFiles) ? allFiles : [allFiles];`
`43`	`43`	`req.allowOverwrite = fields.allow_overwrite === 'true';`
`44`	`44`
`45`	`45`	`next();`