Merge branch '8.19' into backport/8.19/pr-250106

kc13greiner · web-flow · commit c43f3e7fecf5 · 2026-01-26T14:25:16.000-05:00
diff --git a/x-pack/platform/plugins/shared/global_search/server/routes/find.ts b/x-pack/platform/plugins/shared/global_search/server/routes/find.ts
@@ -29,7 +29,7 @@ export const registerInternalFindRoute = (router: GlobalSearchRouter) => {
           }),
           options: schema.maybe(
             schema.object({
-              preference: schema.maybe(schema.string()),
+              preference: schema.maybe(schema.string({ maxLength: 64 })),
             })
           ),
         }),
diff --git a/x-pack/platform/plugins/shared/global_search/server/routes/integration_tests/find.test.ts b/x-pack/platform/plugins/shared/global_search/server/routes/integration_tests/find.test.ts
@@ -122,6 +122,35 @@ describe('POST /internal/global_search/find', () => {
     );
   });
 
+  it('allows requests with max length options.preference string', async () => {
+    const longPreference = 'a'.repeat(64); // maxLength is 64
+
+    const response = await supertest(httpSetup.server.listener)
+      .post('/internal/global_search/find')
+      .send({ params: { term: 'search' }, options: { preference: longPreference } })
+      .expect(200);
+
+    expect(response.body).toEqual({});
+  });
+
+  it('disallows requests with large options.preference string', async () => {
+    const longPreference = 'a'.repeat(65); // maxLength is 64
+
+    const response = await supertest(httpSetup.server.listener)
+      .post('/internal/global_search/find')
+      .send({ params: { term: 'search' }, options: { preference: longPreference } })
+      .expect(400);
+
+    expect(response.body).toEqual(
+      expect.objectContaining({
+        error: 'Bad Request',
+        message:
+          '[request body.options.preference]: value has length [65] but it must have a maximum length of [64].',
+        statusCode: 400,
+      })
+    );
+  });
+
   it('returns the default error when the observable throws any other error', async () => {
     globalSearchHandlerContext.find.mockReturnValue(throwError('any-error'));
 
