admin: fix index validation for PUT requests (#6824)

debug-ing · web-flow · commit 96c5c554c124 · 2025-02-04T08:57:32.000-07:00
diff --git a/admin.go b/admin.go
@@ -1139,7 +1139,7 @@ traverseLoop:
 						return fmt.Errorf("[%s] invalid array index '%s': %v",
 							path, idxStr, err)
 					}
-					if idx < 0 || idx >= len(arr) {
+					if idx < 0 || (method != http.MethodPut && idx >= len(arr)) || idx > len(arr) {
 						return fmt.Errorf("[%s] array index out of bounds: %s", path, idxStr)
 					}
 				}

Original file line number	Diff line number	Diff line change
`@@ -1139,7 +1139,7 @@ traverseLoop:`
`1139`	`1139`	`return fmt.Errorf("[%s] invalid array index '%s': %v",`
`1140`	`1140`	`path, idxStr, err)`
`1141`	`1141`	`}`
`1142`		`- if idx < 0 \|\| idx >= len(arr) {`
	`1142`	`+ if idx < 0 \|\| (method != http.MethodPut && idx >= len(arr)) \|\| idx > len(arr) {`
`1143`	`1143`	`return fmt.Errorf("[%s] array index out of bounds: %s", path, idxStr)`
`1144`	`1144`	`}`
`1145`	`1145`	`}`