fix(execution): validate fromEventId query param in reconnection endpoint

waleedlatif1 · claude · waleedlatif1 · commit ef477bacb123 · 2026-02-11T14:29:47.000-08:00
Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/apps/sim/app/api/workflows/[id]/executions/[executionId]/stream/route.ts b/apps/sim/app/api/workflows/[id]/executions/[executionId]/stream/route.ts
@@ -58,7 +58,8 @@ export async function GET(
     }
 
     const fromParam = req.nextUrl.searchParams.get('from')
-    const fromEventId = fromParam ? Number.parseInt(fromParam, 10) : 0
+    const parsed = fromParam ? Number.parseInt(fromParam, 10) : 0
+    const fromEventId = Number.isFinite(parsed) && parsed >= 0 ? parsed : 0
 
     logger.info('Reconnection stream requested', {
       workflowId,

Original file line number	Diff line number	Diff line change
`@@ -58,7 +58,8 @@ export async function GET(`
`58`	`58`	`}`
`59`	`59`
`60`	`60`	`const fromParam = req.nextUrl.searchParams.get('from')`
`61`		`- const fromEventId = fromParam ? Number.parseInt(fromParam, 10) : 0`
	`61`	`+ const parsed = fromParam ? Number.parseInt(fromParam, 10) : 0`
	`62`	`+ const fromEventId = Number.isFinite(parsed) && parsed >= 0 ? parsed : 0`
`62`	`63`
`63`	`64`	`logger.info('Reconnection stream requested', {`
`64`	`65`	`workflowId,`