Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/notifications.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--lib/Controller/PushController.php3
1 files changed, 3 insertions, 0 deletions
diff --git a/lib/Controller/PushController.php b/lib/Controller/PushController.php
index 4678e70..ce434ac 100644
--- a/lib/Controller/PushController.php
+++ b/lib/Controller/PushController.php
@@ -106,6 +106,9 @@ class PushController extends OCSController {
}
$tokenId = $this->session->get('token-id');
+ if (!\is_int($tokenId)) {
+ return new DataResponse(['message' => 'INVALID_SESSION_TOKEN'], Http::STATUS_BAD_REQUEST);
+ }
try {
$token = $this->tokenProvider->getTokenById($tokenId);
} catch (InvalidTokenException $e) {