diff --git a/packages/backend/src/server/api/streaming.ts b/packages/backend/src/server/api/streaming.ts index dff353c2e..8bf985fc2 100644 --- a/packages/backend/src/server/api/streaming.ts +++ b/packages/backend/src/server/api/streaming.ts @@ -16,6 +16,10 @@ export const initializeStreamingServer = (server: http.Server): void => { ws.on('request', async (request): Promise => { const q = request.resourceURL.query as ParsedUrlQuery; + if (q.i instanceof Array) { + request.reject(400); + return; + } const [user, app] = await authenticate(request.httpRequest.headers.authorization, q.i) .catch(err => {