fix(regex): ensure that integer query param can be sent and converted…

… to regex safe close #451
ServeRest · Jan 25, 2024 · b565d88 · b565d88
1 parent 4e81871
commit b565d88
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/src/utils/alterarValoresParaRegex.js b/src/utils/alterarValoresParaRegex.js
@@ -12,8 +12,10 @@ module.exports = queryString => {
       delete queryString[key]
     } else if (permittedKeys.includes(key)) {
       try {
+        // Ensure queryString[key] is a string
+        const queryStringValue = typeof queryString[key] === 'string' ? queryString[key] : String(queryString[key])
         // Add 'i' flag for case-insensitive matching
-        queryString[key] = new RegExp(escapeStringRegexp(queryString[key]), 'i')
+        queryString[key] = new RegExp(escapeStringRegexp(queryStringValue), 'i')
       } catch (error) /* istanbul ignore next */ {
         log({ level: 'error', message: `Failed to convert ${key} to RegExp: ${error.message}` })
         throw error

diff --git a/test/unit/alterarValoresParaRegex.test.js b/test/unit/alterarValoresParaRegex.test.js
@@ -6,7 +6,7 @@ describe('alterarValoresParaRegex', () => {
   it('should convert specified fields to RegExp', () => {
     const queryString = {
       nome: 'test',
-      password: '1234',
+      password: 1234,
       descricao: 'description',
       other: 'field'
     }