Properly validate query is specification

HackIllinois · Oct 13, 2024 · 8ffdacb · 8ffdacb
1 parent 1d36c3a
commit 8ffdacb
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/middleware/specification.ts b/src/middleware/specification.ts
@@ -101,6 +101,18 @@ export default function specification<
                 });
             }
         }
+
+        if (spec.query) {
+            const result = await spec.query.safeParseAsync(req.query);
+            if (!result.success) {
+                return res.status(StatusCode.ClientErrorBadRequest).json({
+                    error: "BadRequest",
+                    message: "Bad request made - invalid query format",
+                    validationErrors: result.error.errors,
+                });
+            }
+        }
+
         if (spec.body) {
             const result = await spec.body.safeParseAsync(req.body);
             if (!result.success) {