From 6ca678e137b5f3549b734efe9429359176c1eaf7 Mon Sep 17 00:00:00 2001
From: RealBeepMcJeep <realbeepmcjeep@gmail.com>
Date: Wed, 30 Aug 2023 08:35:19 -0700
Subject: [PATCH] sanitize only accepts strings

---
 server.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server.js b/server.js
index fd7f03f01..a16a6fdc2 100644
--- a/server.js
+++ b/server.js
@@ -5365,7 +5365,8 @@ app.post('/asset_delete', jsonParser, async (request, response) => {
  * @returns {void}
  */
 app.post('/get_character_assets_list', jsonParser, async (request, response) => {
-    const name = sanitize(request.query.name);
+    if (request.query.name === undefined) return response.sendStatus(400);
+    const name = sanitize(request.query.name.toString());
     const inputCategory = request.query.category;
     const validCategories = ["bgm", "ambient"]