fix(filter): validate fields before using them

Resolves https://vikunja.sentry.io/share/issue/0e99ec2d0ee64e7aa40ea78098d5a316/
2025-01-24 19:06:18 +01:00 · 2025-01-24 19:06:18 +01:00 · acf1ce862a
parent b0b8262aac
commit acf1ce862a
1 changed files with 6 additions and 0 deletions
--- a/pkg/models/task_collection_filter.go
+++ b/pkg/models/task_collection_filter.go
@ -134,6 +134,12 @@ func parseFilterFromExpression(f fexpr.ExprGroup, loc *time.Location) (filter *t
 	if filter.field == "project" {
 		filter.field = "project_id"
 	}
+
+	err = validateTaskField(filter.field)
+	if err != nil {
+		return nil, err
+	}
+
 	reflectValue, filter.value, err = getNativeValueForTaskField(filter.field, filter.comparator, value, loc)
 	if err != nil {
 		return nil, ErrInvalidTaskFilterValue{