Merge pull request #1354 from TangoBeee/master

fix: fixed Integer to String bug for COMMAND_INJECTION_MATH_COMPUTE test template
akto-api-security · Aug 16, 2024 · ed66cc3 · ed66cc3
2 parents 659dce5 + 5422a79
commit ed66cc3
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/...ng/src/main/java/com/akto/test_editor/filter/data_operands_impl/ContainsEitherFilter.java b/...ng/src/main/java/com/akto/test_editor/filter/data_operands_impl/ContainsEitherFilter.java
@@ -2,6 +2,7 @@
 
 import java.util.ArrayList;
 import java.util.List;
+import java.util.stream.Collectors;
 
 import com.akto.dao.test_editor.TestEditorEnums;
 import com.akto.dto.test_editor.DataOperandFilterRequest;
@@ -17,7 +18,14 @@ public ValidationResult isValid(DataOperandFilterRequest dataOperandFilterReques
         List<String> notMatchedQuerySet = new ArrayList<>();
         String data;
         try {
-            querySet = (List<String>) dataOperandFilterRequest.getQueryset();
+            Object querysetObj = dataOperandFilterRequest.getQueryset();
+            if (querysetObj instanceof List<?>) {
+                querySet = ((List<?>) querysetObj).stream()
+                        .map(String::valueOf)
+                        .collect(Collectors.toList());
+            } else {
+                querySet = new ArrayList<>();
+            }
             data = (String) dataOperandFilterRequest.getData();
         } catch(Exception e) {
             return new ValidationResult(false, ValidationResult.GET_QUERYSET_CATCH_ERROR);