161sh/trashposs
1
0
Fork 0
mirror of https://iceshrimp.dev/crimekillz/trashposs synced 2024-11-22 08:53:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

[API] Fix: Validate id

Browse Source
This commit is contained in:
syuilo 2017-01-21 07:46:43 +09:00
parent 1b499919b8
commit 8c747ab516
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/api/endpoints/posts/show.js
View File

@ -23,6 +23,11 @@ module.exports = (params, user) =>
return rej('post_id is required');
}
// Validate id
if (!mongo.ObjectID.isValid(postId)) {
return rej('incorrect post_id');
}
// Get post
const post = await Post.findOne({
_id: new mongo.ObjectID(postId)