feat: limit max num of files in zip

italia · Oct 25, 2023 · 30b79b0 · 30b79b0
1 parent be7cba7
commit 30b79b0
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/spid-validator/server/api/metadata-sp.js b/spid-validator/server/api/metadata-sp.js
@@ -8,6 +8,8 @@ const config_dir = require('../../config/dir.json');
 const config_idp = require("../../config/idp.json");
 const config_test = require("../../config/test.json");
 const moment = require('moment');
+
+const ZIP_MAX_NUM_FILES = 100;
 
 module.exports = function(app, checkAuthorisation, getEntityDir, database) {
 
@@ -221,6 +223,12 @@ module.exports = function(app, checkAuthorisation, getEntityDir, database) {
 
                 let metadata_list = [];
                 const files = Utility.readDir(getEntityDir(config_dir.TEMP));
+
+                if(files.length>ZIP_MAX_NUM_FILES) {
+                    res.status(400).send(`Il pacchetto zip può contenere massimo ${ZIP_MAX_NUM_FILES} file`);
+                    return;
+                }
+
                 const saveFilePromises = files.map(async (file) => {
 
                     Utility.log("CHECK METADATA FILE from ZIP: ", file);

diff --git a/spid-validator/server/package.json b/spid-validator/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "spid-validator",
-  "version": "1.10.1",
+  "version": "1.10.2",
   "description": "Tool for validating Service Provider compliance to SPID response from Identity Provider",
   "main": "spid-validator",
   "author": "Michele D'Amico (damikael) - AgID",