diff --git a/src/app/resource/controllers/ResourceControlController.php b/src/app/resource/controllers/ResourceControlController.php index 4ac16788699620c1df6a8756e0bff2b79f4b2c07..6cf6bf67fc5618e0a138a5bad6b97435a8942d6c 100644 --- a/src/app/resource/controllers/ResourceControlController.php +++ b/src/app/resource/controllers/ResourceControlController.php @@ -471,6 +471,10 @@ class ResourceControlController } } } elseif (!empty($body['priority'])) { + if (!Validator::stringType()->validate($body['priority'])) { + return ['errors' => "Body priority is not a string"]; + } + $priority = PriorityModel::getById(['id' => $body['priority'], 'select' => [1]]); if (empty($priority)) { return ['errors' => "Body priority does not exist"];