From 311df47ee126135063005142736c45aaded934c5 Mon Sep 17 00:00:00 2001
From: Ronni Skansing <rskansing@gmail.com>
Date: Thu, 22 Jan 2026 16:58:17 +0100
Subject: [PATCH] fix update options in settings

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
---
 backend/service/option.go | 29 ++++++++++++++++++++++++-----
 1 file changed, 24 insertions(+), 5 deletions(-)

diff --git a/backend/service/option.go b/backend/service/option.go
index 903fdf9..f13f9fe 100644
--- a/backend/service/option.go
+++ b/backend/service/option.go
@@ -149,14 +149,33 @@ func (o *Option) SetOptionByKey(
 			)
 		}
 	case data.OptionKeyLogLevel:
-		// is allow listed
-		fallthrough
+		// validate log level value
+		if v != "debug" && v != "info" && v != "warn" && v != "error" {
+			o.Logger.Debugw("invalid log level value",
+				"value", v,
+			)
+			return validate.WrapErrorWithField(
+				errs.NewValidationError(
+					errors.New("invalid log level"),
+				),
+				"log level",
+			)
+		}
 	case data.OptionKeyDBLogLevel:
-		// is allow listed
-		fallthrough
+		// validate db log level value
+		if v != "silent" && v != "info" && v != "warn" && v != "error" {
+			o.Logger.Debugw("invalid db log level value",
+				"value", v,
+			)
+			return validate.WrapErrorWithField(
+				errs.NewValidationError(
+					errors.New("invalid db log level"),
+				),
+				"db log level",
+			)
+		}
 	case data.OptionKeyAdminSSOLogin:
 		// is allow listed
-		fallthrough
 	case data.OptionKeyDisplayMode:
 		// validate display mode value
 		if v != data.OptionValueDisplayModeWhitebox && v != data.OptionValueDisplayModeBlackbox {