diff options
| author | syuilo <syuilotan@yahoo.co.jp> | 2017-03-01 14:49:04 +0900 |
|---|---|---|
| committer | syuilo <syuilotan@yahoo.co.jp> | 2017-03-01 14:49:04 +0900 |
| commit | 4f1a65f758e76475360b98e4381981151fcdfa4a (patch) | |
| tree | db86649f37e21b6cbacdd9b09b5b07578037e5fb /src/api/endpoints/messaging | |
| parent | [API] Fix bug (diff) | |
| download | sharkey-4f1a65f758e76475360b98e4381981151fcdfa4a.tar.gz sharkey-4f1a65f758e76475360b98e4381981151fcdfa4a.tar.bz2 sharkey-4f1a65f758e76475360b98e4381981151fcdfa4a.zip | |
[API] Fix bug
Diffstat (limited to 'src/api/endpoints/messaging')
| -rw-r--r-- | src/api/endpoints/messaging/messages/create.js | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/api/endpoints/messaging/messages/create.js b/src/api/endpoints/messaging/messages/create.js index 47bc1a9968..2d52bf263e 100644 --- a/src/api/endpoints/messaging/messages/create.js +++ b/src/api/endpoints/messaging/messages/create.js @@ -31,6 +31,10 @@ module.exports = (params, user) => // Get 'user_id' parameter let recipient = params.user_id; if (recipient !== undefined && recipient !== null) { + if (typeof recipient != 'string') { + return rej('user_id must be a string'); + } + // Validate id if (!mongo.ObjectID.isValid(recipient)) { return rej('incorrect user_id'); |