From 160330675af44b761f00bffb92a4981452cd0a93 Mon Sep 17 00:00:00 2001 From: kodumbeats Date: Thu, 17 Jun 2021 13:09:40 -0400 Subject: [PATCH] Add whitelist of filters to createAttribute --- app/controllers/api/database.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/api/database.php b/app/controllers/api/database.php index 9e1f43f5cc..771c430149 100644 --- a/app/controllers/api/database.php +++ b/app/controllers/api/database.php @@ -241,7 +241,7 @@ App::post('/v1/database/collections/:collectionId/attributes') ->param('required', null, new Boolean(), 'Is attribute required?') ->param('signed', true, new Boolean(), 'Is attribute signed?', true) ->param('array', false, new Boolean(), 'Is attribute an array?', true) - ->param('filters', [], new ArrayList(new Text(256)), 'Array of filters.', true) + ->param('filters', [], new ArrayList(new Whitelist(['encrypt', 'json'])), 'Array of filters.', true) ->inject('response') ->inject('dbForExternal') ->inject('audits')