From 057939c2af2bb4fcd5117f15746a609638cbd316 Mon Sep 17 00:00:00 2001 From: Allard Date: Sun, 19 Jul 2026 11:53:10 +0800 Subject: [PATCH] fix(plugins): validate cached manifests are an array --- web/src/plugins/usePlugins.ts | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/web/src/plugins/usePlugins.ts b/web/src/plugins/usePlugins.ts index effc5cce759e9..f94573eb4e99d 100644 --- a/web/src/plugins/usePlugins.ts +++ b/web/src/plugins/usePlugins.ts @@ -22,7 +22,9 @@ const MANIFEST_CACHE_KEY = "hermes:plugin-manifests"; function getCachedManifests(): PluginManifest[] | null { try { const raw = sessionStorage.getItem(MANIFEST_CACHE_KEY); - return raw ? (JSON.parse(raw) as PluginManifest[]) : null; + if (!raw) return null; + const parsed = JSON.parse(raw); + return Array.isArray(parsed) ? (parsed as PluginManifest[]) : null; } catch { return null; }