Project-Pro/orderPRO
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: whitelist integration_id against known integrations in product update

Browse Source
This commit is contained in:
Jacek Pyziak
2026-02-27 18:26:34 +01:00
parent 5d192427ec
commit 33be5affa3
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/Modules/Products/ProductsController.php
View File

@@ -456,11 +456,15 @@ final class ProductsController
} }
// Save per-integration content overrides // Save per-integration content overrides
$allowedIntegrationIds = array_map(
static fn (array $i): int => (int) ($i['id'] ?? 0),
$this->integrations->listByType('shoppro')
);
$integrationContent = $request->input('integration_content', []); $integrationContent = $request->input('integration_content', []);
if (is_array($integrationContent)) { if (is_array($integrationContent)) {
foreach ($integrationContent as $rawIntegrationId => $content) { foreach ($integrationContent as $rawIntegrationId => $content) {
$integrationId = (int) $rawIntegrationId; $integrationId = (int) $rawIntegrationId;
if ($integrationId <= 0 || !is_array($content)) { if ($integrationId <= 0 || !is_array($content) || !in_array($integrationId, $allowedIntegrationIds, true)) {
continue; continue;
} }
$this->products->upsertIntegrationTranslation( $this->products->upsertIntegrationTranslation(