From 3db680a40e993a4ef332dd6a8eb4044c91a81e0f Mon Sep 17 00:00:00 2001 From: Fredrik Oseberg Date: Fri, 25 Feb 2022 12:07:46 +0100 Subject: [PATCH] fix: only allow specified operators --- src/lib/schema/feature-schema.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/lib/schema/feature-schema.ts b/src/lib/schema/feature-schema.ts index b04b071151..93bd22f152 100644 --- a/src/lib/schema/feature-schema.ts +++ b/src/lib/schema/feature-schema.ts @@ -1,4 +1,5 @@ import joi from 'joi'; +import { ALL_OPERATORS } from '../util/constants'; import { nameType } from '../routes/util'; export const nameSchema = joi @@ -8,7 +9,7 @@ export const nameSchema = joi export const constraintSchema = joi.object().keys({ contextName: joi.string(), - operator: joi.string(), + operator: joi.string().valid(...ALL_OPERATORS), values: joi.array().items(joi.string().min(1).max(100)).min(1).optional(), value: joi.optional(), caseInsensitive: joi.boolean().optional(),