(fix): don't do anything if the entity isn't an image or video

Controllers/api/v1/media.php

@@ -36,6 +36,13 @@ class media implements Interfaces\Api, Interfaces\ApiIgnorePam
  return Factory::response(['status' => 'error']);
  }
 
+ if (!in_array($this->getType($entity), ['object:video', 'object:image'], true)) {
+ return Factory::response([
+ 'status' => 'error',
+ 'message' => 'Entity is not a media entity',
+ ]);
+ }
+
  switch ($entity->subtype) {
  case "video":
  // Helpers\Counters::increment($pages[0], 'plays');
@@ -267,7 +274,7 @@ class media implements Interfaces\Api, Interfaces\ApiIgnorePam
  $entity->setAssets($assets->upload($media, $data));
 
  // Save initial entity
- 
+
  $success = $save
  ->setEntity($entity)
  ->save(true);
@@ -356,4 +363,9 @@ class media implements Interfaces\Api, Interfaces\ApiIgnorePam
 
  return $response;
  }
+
+ private function getType($entity): string
+ {
+ return $entity->subtype ? "{$entity->type}:{$entity->subtype}" : $entity->type;
+ }
 }