From d95d67071c6c998580e982c1d43a20eac03e5a14 Mon Sep 17 00:00:00 2001 From: Thomas Hobson Date: Fri, 7 May 2021 19:37:22 +1200 Subject: [PATCH] reject on non-json content-types (#233) --- api/src/api/v2.js | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/api/src/api/v2.js b/api/src/api/v2.js index f961913..bfb1778 100644 --- a/api/src/api/v2.js +++ b/api/src/api/v2.js @@ -6,6 +6,16 @@ const {Job} = require("../job"); const package = require('../package') const logger = require('logplease').create('api/v1'); +router.use(function(req, res, next){ + if(req.method == "POST" && req.headers['content-type'] !== "application/json") + return res + .status(415) + .send({ + message: "requests must be of type application/json" + }) + next(); +}) + router.post('/execute', async function(req, res){ const {language, version, files, stdin, args, run_timeout, compile_timeout} = req.body;