From cb19aaf77f0cb547eb075df47e0b58d34a3053c9 Mon Sep 17 00:00:00 2001 From: Carlos Santos <4a.santos@gmail.com> Date: Fri, 11 Apr 2025 11:25:04 +0200 Subject: [PATCH] backend: Validate maxItems to ensure it is a positive number and capped at 100 --- .../middlewares/request-validators/room-validator.middleware.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/backend/src/middlewares/request-validators/room-validator.middleware.ts b/backend/src/middlewares/request-validators/room-validator.middleware.ts index fd72c9a..2ef806c 100644 --- a/backend/src/middlewares/request-validators/room-validator.middleware.ts +++ b/backend/src/middlewares/request-validators/room-validator.middleware.ts @@ -99,9 +99,11 @@ const GetParticipantRoleSchema = z.object({ const GetRoomFiltersSchema: z.ZodType = z.object({ maxItems: z.coerce .number() + .positive('maxItems must be a positive number') .transform((val) => { // Convert the value to a number const intVal = Math.floor(val); + // Ensure it's not greater than 100 return intVal > 100 ? 100 : intVal; }) .default(10),