Add validation to media-folder parameter

1 files changed, 2 insertions, 1 deletions

diff --git a/app/Http/RequestHandlers/ManageMediaData.php b/app/Http/RequestHandlers/ManageMediaData.php
index 5d38e065b5..9863b14d64 100644
--- a/app/Http/RequestHandlers/ManageMediaData.php
+++ b/app/Http/RequestHandlers/ManageMediaData.php
@@ -96,7 +96,8 @@ class ManageMediaData implements RequestHandlerInterface
         $files = Validator::queryParams($request)->isInArray(['local', 'external', 'unused'])->string('files');
 
         // Files within this folder
-        $media_folder = Validator::queryParams($request)->string('media_folder');
+        $media_folders = $this->media_file_service->allMediaFolders($data_filesystem)->all();
+        $media_folder  = Validator::queryParams($request)->isInArray($media_folders)->string('media_folder');
 
         // Show sub-folders within $media_folder
         $subfolders = Validator::queryParams($request)->isInArray(['include', 'exclude'])->string('subfolders');