fix(legacy): validate id param in show image controller (#1510)

2022-01-13 06:10:32 +01:00 · 2022-01-13 06:10:32 +01:00 · fd580d689f
parent d986302de2
commit fd580d689f
1 changed files with 10 additions and 0 deletions
--- a/legacy/application/modules/rest/controllers/ShowImageController.php
+++ b/legacy/application/modules/rest/controllers/ShowImageController.php
@ -326,6 +326,16 @@ class Rest_ShowImageController extends Zend_Rest_Controller
            return false;
        }

+        $id = filter_var($id, FILTER_VALIDATE_INT);
+
+        if ($id === false) {
+            $resp = $this->getResponse();
+            $resp->setHttpResponseCode(400);
+            $resp->appendBody('ERROR: Invalid show ID specified.');
+
+            return false;
+        }
+
        return $id;
    }
 }