fix: force json response for date manipulation vulnerable endpoint

NeuraLegion · Sep 4, 2024 · a88499d · a88499d
1 parent 721a32e
commit a88499d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/misc/misc.controller.ts b/src/misc/misc.controller.ts
@@ -93,13 +93,13 @@ export class MiscController {
     @Query('from') from: string,
     @Query('to') to: string,
     @Query('weekday') weekday?: string
-  ): Promise<string> {
+  ): Promise<{ count: number }> {
     const count = await this.dateService.calculateWeekdays(
       from,
       to,
       weekday ? +weekday : 1
     );
 
-    return JSON.stringify({ count }, null, 2);
+    return { count };
   }
 }