From 3b19af4076a66b5246ecbf1e6162ea42776fbe0f Mon Sep 17 00:00:00 2001 From: Prajwal Raj Date: Sat, 12 Sep 2026 16:33:51 -0700 Subject: [PATCH] fix: reject out-of-range coordinates in Google text search Adapt the coordinate bounds check contributed in public PR #46 to the Places provider. --- server/providers/places/google.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/server/providers/places/google.js b/server/providers/places/google.js index 2fb4aea9c..8eeebaf24 100644 --- a/server/providers/places/google.js +++ b/server/providers/places/google.js @@ -183,7 +183,8 @@ export function googlePlacesContextProxy({ if ( !textQuery || !Number.isFinite(latitude) || - !Number.isFinite(longitude) + !Number.isFinite(longitude) || + latitude < -90 || latitude > 90 || longitude < -180 || longitude > 180 ) { res.statusCode = 400; res.setHeader('Content-Type', 'application/json');