@cryptotaxi247 / kubo / commits / d005ec42b

object put: detect unexpected fields

License: MIT Signed-off-by: Łukasz Magiera <magik6k@gmail.com>

Steven Allen committed May 14, 2019 at 23:37 UTC d005ec42b157f2e1899d425abd9b4734e7e86f01
1 file changed +3 -1
core/coreapi/object.go
+3 -1
@@ -73,7 +73,9 @@ func (api *ObjectAPI) Put(ctx context.Context, src io.Reader, opts ...caopts.Obj
73 switch options.InputEnc {
74 case "json":
75 node := new(Node)
76 - err = json.Unmarshal(data, node)
76 + decoder := json.NewDecoder(bytes.NewReader(data))
77 + decoder.DisallowUnknownFields()
78 + err = decoder.Decode(node)
79 if err != nil {
80 return nil, err
81 }