From 0f82565d85dc92135cfa8b832303875ad580d418 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Elan=20Ruusam=C3=A4e?= Date: Mon, 14 Dec 2020 14:24:22 +0200 Subject: [PATCH] Import: require input to be parsed properly Do not call saver if input is not in expected format (array). --- src/Xhgui/Controller/ImportController.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/Xhgui/Controller/ImportController.php b/src/Xhgui/Controller/ImportController.php index e28c6e8bd..c6a5fccc0 100644 --- a/src/Xhgui/Controller/ImportController.php +++ b/src/Xhgui/Controller/ImportController.php @@ -53,6 +53,9 @@ private function runImport(Request $request): string } $data = json_decode($request->getBody(), true); + if (!is_array($data)) { + throw new InvalidArgumentException('Failed do decode payload'); + } return $this->saver->save($data); }