code002lover/IPost
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

better input validation for post endpoint

Browse Source
This commit is contained in:
Mystikfluu 2022-06-04 13:58:30 +02:00
parent 7f408cd87c
commit 6b86ab0223
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
server.js
View File

@ -351,6 +351,14 @@ router.get("/api/getotheruser",async function(req,res) {
}) })
router.post("/api/post", async function(req,res) { router.post("/api/post", async function(req,res) {
if(!req.body.message) {
res.json({"error":"no message to post"})
return
}
if((typeof req.body.message) != "string") {
res.json({"error":"no message to post"})
return
}
req.body.message = encodeURIComponent(req.body.message.trim()) req.body.message = encodeURIComponent(req.body.message.trim())
if(!req.body.message) { if(!req.body.message) {
res.json({"error":"no message to post"}) res.json({"error":"no message to post"})