diff --git a/src/app/resource/controllers/ResController.php b/src/app/resource/controllers/ResController.php
index e417237a5b70bf8df29a7f57883da5189760d03a..a9cc5440b7628e7d6cceefecbc9f6c1b62609a02 100755
--- a/src/app/resource/controllers/ResController.php
+++ b/src/app/resource/controllers/ResController.php
@@ -1241,7 +1241,7 @@ class ResController extends ResourceControlController
 
     public function getResourceFileInformation(Request $request, Response $response, array $args)
     {
-        if (!ResController::hasRightByResId(['resId' => [$args['resId']], 'userId' => $GLOBALS['id']])) {
+        if (!Validator::intVal()->validate($args['resId']) ||  !ResController::hasRightByResId(['resId' => [$args['resId']], 'userId' => $GLOBALS['id']])) {
             return $response->withStatus(403)->withJson(['errors' => 'Document out of perimeter']);
         }
 
diff --git a/src/app/tag/controllers/TagController.php b/src/app/tag/controllers/TagController.php
index abeab457b16f1982bfd57e8ea3a3fe73b32ebea8..ecd4ff62324effe10f9a508237899108f91c26fb 100644
--- a/src/app/tag/controllers/TagController.php
+++ b/src/app/tag/controllers/TagController.php
@@ -71,7 +71,7 @@ class TagController
             'data'   => [$tag['id']]
         ]);
 
-        $tag['canMerge'] = empty($tag['parent_id']) && empty($childTags[0]['count']);
+        $tag['canMerge'] = empty($tag['parent_id']) && empty($childTags);
 
         return $response->withJson($tag);
     }