Enhance file name validation by allowing objects with toString method

4efed978f048cced3217f18523abdcc9f6e07743

Cohee <18619528+Cohee1207@users.noreply.github.com>

src/middleware/validateFileName.js+10 -1 Viewed

 import path from 'node:path';
 /**
 + * Checks if an object has a toString method.
 + * @param {object} o Object to check
 + * @returns {boolean} True if the object has a toString method, false otherwise
 + */
 +function hasToString(o) {
 +    return o != null && typeof o.toString === 'function';
 +}
++
 +/**
  * Gets a middleware function that validates the field in the request body.
  * @param {string} fieldName Field name
  * @returns {import('express').RequestHandler} Middleware function

     * @param {import('express').NextFunction} next Next middleware
     */
     return function validateAvatarUrlMiddleware(req, res, next) {
         if (req.body && fieldName in req.body && (typeof req.body[fieldName] === 'string' || hasToString(req.body[fieldName]))) {
             const forbiddenRegExp = path.sep === '/' ? /[/\x00]/ : /[/\x00\\]/;
             if (forbiddenRegExp.test(req.body[fieldName])) {
                 console.error('An error occurred while validating the request body', {