rest: Prevent unlisted filterable properties from being used (fix #594)

PavlidisLab · Mar 7, 2023 · 29876c9 · 29876c9
1 parent 659882e
commit 29876c9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/gemma-rest/src/main/java/ubic/gemma/rest/util/args/FilterArg.java b/gemma-rest/src/main/java/ubic/gemma/rest/util/args/FilterArg.java
@@ -152,6 +152,9 @@ Filters getFilters( FilteringService<O> service ) throws MalformedArgException {
                 String property = subClause.PROPERTY().getText();
                 ubic.gemma.persistence.util.Filter.Operator operator;
                 try {
+                    if ( !service.getFilterableProperties().contains( property ) ) {
+                        throw new IllegalArgumentException( String.format( "The property of %s is unknown", property ) );
+                    }
                     if ( subClause.operator() != null ) {
                         operator = operatorToOperator( subClause.operator() );
                         String requiredValue = scalarToString( subClause.scalar() );