@onlineapps/conn-orch-orchestrator 1.0.59 → 1.0.60

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/src/WorkflowOrchestrator.js +4 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@onlineapps/conn-orch-orchestrator",
3
- "version": "1.0.59",
3
+ "version": "1.0.60",
4
4
  "description": "Workflow orchestration connector for OA Drive - handles message routing and workflow execution",
5
5
  "main": "src/index.js",
6
6
  "scripts": {
package/src/WorkflowOrchestrator.js CHANGED
@@ -575,6 +575,10 @@ class WorkflowOrchestrator {
575
575
 
576
576
  // Special handling for 'steps' - support array (legacy) and map (steps_by_id)
577
577
  if (parts[i - 1] === 'steps') {
578
+ // Disallow numeric/index access (must reference by step_id)
579
+ if (/^\\d+$/.test(part)) {
580
+ return undefined;
581
+ }
578
582
  if (context.steps_by_id && context.steps_by_id[part]) {
579
583
  current = context.steps_by_id[part];
580
584
  } else if (Array.isArray(context.steps)) {