diff --git a/src/middleware/index.js b/src/middleware/index.js index 1c733c970d..27f07e895b 100644 --- a/src/middleware/index.js +++ b/src/middleware/index.js @@ -338,5 +338,11 @@ middleware.validateActivity = helpers.try(async (req, res, next) => { return res.sendStatus(400); } + // Sanity-check payload schema + const required = ['type']; + if (!required.every(prop => req.body.hasOwnProperty(prop))) { + return res.sendStatus(400); + } + next(); });