diff --git a/server/middlewares/validators/oembed.ts b/server/middlewares/validators/oembed.ts index 24ba5569d..ab4dbb4d1 100644 --- a/server/middlewares/validators/oembed.ts +++ b/server/middlewares/validators/oembed.ts @@ -37,8 +37,11 @@ const oembedValidator = [ .end() } - const startIsOk = req.query.url.startsWith(urlShouldStartWith) - const matches = videoWatchRegex.exec(req.query.url) + const url = req.query.url as string + + const startIsOk = url.startsWith(urlShouldStartWith) + const matches = videoWatchRegex.exec(url) + if (startIsOk === false || matches === null) { return res.status(400) .json({ error: 'Invalid url.' })