codeql fix

hpcc-systems · Jan 25, 2024 · f8419f2 · f8419f2
1 parent eb2da58
commit f8419f2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/server/routes/orbit/read.js b/server/routes/orbit/read.js
@@ -250,6 +250,8 @@ router.get(
       const { application_id, keyword } = req.params;
       if (!application_id) throw Error("Invalid app ID");
 
+      if (!typeof keyword === "string") throw Error("Invalid keyword");
+
       const query = `select Name from DimBuildInstance where Name like '%${keyword}%' and Name not like 'Scrub%' and EnvironmentName = 'Insurance' order by  Name asc`;
 
       const result = await runSQLQuery(query, dbConfig);