[fix-meetingId-not-trim-error] - add validation

2023-01-26 12:05:42 -03:00 · 2023-01-26 12:05:42 -03:00 · e3efc2929f
commit e3efc2929f
parent b229a4eb8a
1 changed files with 3 additions and 0 deletions
--- a/bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
+++ b/bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
@ -123,6 +123,9 @@ class ApiController {
    if(!(validationResponse == null)) {
      invalid(validationResponse.getKey(), validationResponse.getValue())
      return
+    } else if (ParamsUtil.sanitizeString(params.meetingID) != params.meetingID) {
+      invalid("idInvaid", "Meeting ID is invalid")
+      return
    }

    // Ensure unique TelVoice. Uniqueness is not guaranteed by paramsProcessorUtil.