add check

ar2rsawseen · ar2rsawseen · commit 55b9a6582c72 · 2025-03-31T17:08:10.000+03:00
diff --git a/api/utils/common.js b/api/utils/common.js
@@ -1609,7 +1609,7 @@ common.returnMessage = function(params, returnCode, message, heads, noResult = f
             headers[i] = heads[i];
         }
     }
-    if (params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {
+    if (params && params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {
         var cors_headers = (params.app.plugins.allow_access_control_origin || "").replace(/\r\n|\r|\n/g, "\n").split("\n");
         if (cors_headers.includes(params.req.headers.origin)) {
             headers['Access-Control-Allow-Origin'] = params.req.headers.origin;
@@ -1685,7 +1685,7 @@ common.returnOutput = function(params, output, noescape, heads) {
         }
     }
 
-    if (params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {
+    if (params && params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {
         var cors_headers = (params.app.plugins.allow_access_control_origin || "").replace(/\r\n|\r|\n/g, "\n").split("\n");
         if (cors_headers.includes(params.req.headers.origin)) {
             headers['Access-Control-Allow-Origin'] = params.req.headers.origin;

Original file line number	Diff line number	Diff line change
`@@ -1609,7 +1609,7 @@ common.returnMessage = function(params, returnCode, message, heads, noResult = f`
`1609`	`1609`	`headers[i] = heads[i];`
`1610`	`1610`	`}`
`1611`	`1611`	`}`
`1612`		`- if (params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {`
	`1612`	`+ if (params && params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {`
`1613`	`1613`	`var cors_headers = (params.app.plugins.allow_access_control_origin \|\| "").replace(/\r\n\|\r\|\n/g, "\n").split("\n");`
`1614`	`1614`	`if (cors_headers.includes(params.req.headers.origin)) {`
`1615`	`1615`	`headers['Access-Control-Allow-Origin'] = params.req.headers.origin;`
`@@ -1685,7 +1685,7 @@ common.returnOutput = function(params, output, noescape, heads) {`
`1685`	`1685`	`}`
`1686`	`1686`	`}`
`1687`	`1687`
`1688`		`- if (params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {`
	`1688`	`+ if (params && params.app && params.app.plugins && params.app.plugins.allow_access_control_origin && params.req.headers && params.req.headers.origin) {`
`1689`	`1689`	`var cors_headers = (params.app.plugins.allow_access_control_origin \|\| "").replace(/\r\n\|\r\|\n/g, "\n").split("\n");`
`1690`	`1690`	`if (cors_headers.includes(params.req.headers.origin)) {`
`1691`	`1691`	`headers['Access-Control-Allow-Origin'] = params.req.headers.origin;`