From fcbd5dcae530f6c5c09b850dba3dd783986e490d Mon Sep 17 00:00:00 2001 From: Marcus Moore Date: Tue, 26 Nov 2024 11:33:17 -0800 Subject: [PATCH] Harden asset checkout validation by requiring ints --- app/Http/Requests/AssetCheckoutRequest.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app/Http/Requests/AssetCheckoutRequest.php b/app/Http/Requests/AssetCheckoutRequest.php index f48a7d5e53..5234dcac48 100644 --- a/app/Http/Requests/AssetCheckoutRequest.php +++ b/app/Http/Requests/AssetCheckoutRequest.php @@ -22,9 +22,9 @@ class AssetCheckoutRequest extends Request public function rules() { $rules = [ - 'assigned_user' => 'required_without_all:assigned_asset,assigned_location', - 'assigned_asset' => 'required_without_all:assigned_user,assigned_location', - 'assigned_location' => 'required_without_all:assigned_user,assigned_asset', + 'assigned_user' => 'integer|required_without_all:assigned_asset,assigned_location', + 'assigned_asset' => 'integer|required_without_all:assigned_user,assigned_location', + 'assigned_location' => 'integer|required_without_all:assigned_user,assigned_asset', 'status_id' => 'exists:status_labels,id,deployable,1', 'checkout_to_type' => 'required|in:asset,location,user', 'checkout_at' => [