Check HttpServletRequest before casting

wso2 · Oct 28, 2024 · c20855a · c20855a
1 parent f5a8866
commit c20855a
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/...y/src/main/java/org/wso2/openbanking/cds/identity/filter/InfoSecDataPublishingFilter.java b/...y/src/main/java/org/wso2/openbanking/cds/identity/filter/InfoSecDataPublishingFilter.java
@@ -263,7 +263,10 @@ public void destroy() {
     public boolean shouldPublishCurrentRequestData(ServletRequest request) {
 
         // If the request is internal traffic, no need to publish data
-        return expectedExternalTrafficHeaderValue.equalsIgnoreCase(
-                ((HttpServletRequest) request).getHeader(externalTrafficHeaderName));
+        if (request instanceof HttpServletRequest) {
+            return expectedExternalTrafficHeaderValue.equalsIgnoreCase(
+                    ((HttpServletRequest) request).getHeader(externalTrafficHeaderName));
+        }
+        return false;
     }
 }