From a27b3555f65955b815aeaac19842c170231707c6 Mon Sep 17 00:00:00 2001 From: MasterAcnolo <68693319+MasterAcnolo@users.noreply.github.com> Date: Sat, 27 Dec 2025 11:39:30 +0100 Subject: [PATCH] Potential fix for code scanning alert no. 5: Type confusion through parameter tampering Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- server/controller/info.controller.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/controller/info.controller.js b/server/controller/info.controller.js index 187d074..6ed6a9f 100644 --- a/server/controller/info.controller.js +++ b/server/controller/info.controller.js @@ -11,8 +11,8 @@ async function infoController(req, res){ const url = req.body.url || req.query.url; // Gérer POST et GET - /* Si pas d'url ou url invalide*/ - if (!url || !isValidUrl(url)) return res.status(400).send("❌ Invalid URL Or Missing"); + /* Si pas d'url, url non-string ou url invalide*/ + if (!url || typeof url !== "string" || !isValidUrl(url)) return res.status(400).send("❌ Invalid URL Or Missing"); logger.info(`/Info Request receive by the Info Controller. URL: ${url}`);