Reject non-string values in server/update_values (#74)

This commit is contained in:
Barnaby 2022-05-13 00:32:47 +01:00 committed by GitHub
parent ebe505beb5
commit 0950d1a385
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -248,7 +248,7 @@ module.exports = ( fastify, opts, done ) =>
for ( let key of Object.keys( request.query ) )
{
if ( key == "id" || key == "port" || key == "authport" || !( key in server ) || request.query[ key ].length >= 512 )
if ( key == "id" || key == "port" || key == "authport" || !( key in server ) || request.query[ key ].length >= 512 || typeof request.query[ key ] != "string" )
continue
if ( key == "playerCount" || key == "maxPlayers" )