HoovesSocial/hippofish
2
0
Fork 0
Code Issues 3 Pull requests 1 Projects Releases Packages Wiki Activity Actions

[API] Fix: Validate id

Browse source
This commit is contained in:
syuilo 2017-01-20 17:51:31 +09:00
parent e31eec542f
commit 2cc2ecb13c
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/api/endpoints/posts/likes/create.js
View file

@ -28,6 +28,11 @@ module.exports = (params, user) =>
return rej('post_id is required'); return rej('post_id is required');
} }
// Validate id
if (!mongo.ObjectID.isValid(postId)) {
return rej('incorrect post_id');
}
// Get likee // Get likee
const post = await Post.findOne({ const post = await Post.findOne({
_id: new mongo.ObjectID(postId) _id: new mongo.ObjectID(postId)