settings api: key if present must be a string

2016-10-13 15:32:18 -07:00
parent d460c36e14
commit 49f7fb552b
1 changed files with 1 additions and 0 deletions
--- a/src/routes/settings.js
+++ b/src/routes/settings.js
@@ -180,6 +180,7 @@ function setBackupConfig(req, res, next) {
    assert.strictEqual(typeof req.body, 'object');

    if (typeof req.body.provider !== 'string') return next(new HttpError(400, 'provider is required'));
+    if ('key' in req.body && typeof req.body.key !== 'string') return next(new HttpError(400, 'key must be a string'));

    settings.setBackupConfig(req.body, function (error) {
        if (error && error.reason === SettingsError.BAD_FIELD) return next(new HttpError(400, error.message));