Merge pull request #5549 from andreramos89/BISERVER-15031

[BISERVER-15031] - Limit the PIR Export via REST API to the allowed types - null protection missing
pentaho · Feb 28, 2024 · d66163c · d66163c
2 parents 990beac + 591a95b
commit d66163c
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/extensions/src/main/java/org/pentaho/platform/web/http/api/resources/RepositoryResource.java b/extensions/src/main/java/org/pentaho/platform/web/http/api/resources/RepositoryResource.java
@@ -764,8 +764,12 @@ protected Response doService( String contextId, String resourceId ) throws Objec
   }
 
   private boolean validatePrptiOutputFormat() {
-    String outputFormat = this.httpServletRequest.getParameterMap().get( "output-target" )[0];
-    return AllowedPrptiTypes.getByType( outputFormat ) != null;
+    boolean valid = true;
+    if ( this.httpServletRequest.getParameterMap() != null && this.httpServletRequest.getParameterMap().containsKey( "output-target" ) ) {
+      String outputFormat = this.httpServletRequest.getParameterMap().get( "output-target" )[0];
+      valid = AllowedPrptiTypes.getByType( outputFormat ) != null;
+    }
+    return valid;
   }
 
   abstract class CGFactory implements ContentGeneratorDescriptor {