Only allow defined query

mustofa-id · Jul 7, 2019 · d8e5b06 · d8e5b06
1 parent 2c47ce0
commit d8e5b06
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/shared/post-filter.js b/src/shared/post-filter.js
@@ -24,6 +24,13 @@ export function filter (items, location) {
   // Get first key in search params. eg from sample above `tag`
   const type = params.keys().next().value
 
+  // Only allow query from queryType
+  for (let key in queryType) {
+    if (type !== queryType[key]) {
+      return items
+    }
+  }
+
   // Get value of search params given type. eg from sample above `palette`
   const query = params.get(type)