diff options
Diffstat (limited to 'src/api/endpoints')
| -rw-r--r-- | src/api/endpoints/messaging/messages/create.js | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/api/endpoints/messaging/messages/create.js b/src/api/endpoints/messaging/messages/create.js index 47bc1a9968..2d52bf263e 100644 --- a/src/api/endpoints/messaging/messages/create.js +++ b/src/api/endpoints/messaging/messages/create.js @@ -31,6 +31,10 @@ module.exports = (params, user) => // Get 'user_id' parameter let recipient = params.user_id; if (recipient !== undefined && recipient !== null) { + if (typeof recipient != 'string') { + return rej('user_id must be a string'); + } + // Validate id if (!mongo.ObjectID.isValid(recipient)) { return rej('incorrect user_id'); |