fix: Array length check

AikidoSec · Dec 9, 2024 · 61b4a8b · 61b4a8b
1 parent 275f247
commit 61b4a8b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/library/helpers/attackPath.test.ts b/library/helpers/attackPath.test.ts
@@ -80,7 +80,7 @@ t.test("respects max depth and array length", async (t) => {
     ".prop".repeat(30),
   ]);
 
-  const testArr = Array.from({ length: 101 }, (_, i) => i.toString());
+  const testArr = Array.from({ length: 150 }, (_, i) => i.toString());
 
   t.same(get("50", testArr), [".[50]"]);
   t.same(get("99", testArr), [".[99]"]);

diff --git a/library/helpers/attackPath.ts b/library/helpers/attackPath.ts
@@ -76,7 +76,7 @@ export function getPathsToPayload(
         if (index > MAX_ARRAY_LENGTH) {
           break;
         }
-        traverse(item, path.concat({ type: "array", index }), depth + 1);
+        traverse(item, path.concat({ type: "array", index }), depth);
       }
 
       if (value.join().toLowerCase() === attackPayloadLowercase) {