From dd080bf280686c2dddfb9cd5563e93380001eed3 Mon Sep 17 00:00:00 2001
From: Ben Irvin <ben@innerdvations.com>
Date: Fri, 11 Aug 2023 17:08:03 +0200
Subject: [PATCH] fix missing sanitize

---
 packages/core/upload/server/controllers/admin-folder.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/packages/core/upload/server/controllers/admin-folder.js b/packages/core/upload/server/controllers/admin-folder.js
index 088575acd1..4141fb1f12 100644
--- a/packages/core/upload/server/controllers/admin-folder.js
+++ b/packages/core/upload/server/controllers/admin-folder.js
@@ -51,7 +51,9 @@ module.exports = {
       model: FOLDER_MODEL_UID,
     });
 
-    const query = await permissionsManager.validateQuery(ctx.query);
+    await permissionsManager.validateQuery(ctx.query);
+    const query = await permissionsManager.sanitizeQuery(ctx.query);
+
     const results = await strapi.entityService.findWithRelationCounts(FOLDER_MODEL_UID, {
       ...defaultsDeep(
         {