diff options
Diffstat (limited to 'src/server/api')
| -rw-r--r-- | src/server/api/call.ts | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/server/api/call.ts b/src/server/api/call.ts index b1e1668769..9257ed590e 100644 --- a/src/server/api/call.ts +++ b/src/server/api/call.ts @@ -8,6 +8,10 @@ export default (endpoint: string | Endpoint, user: IUser, app: IApp, data: any, const ep = typeof endpoint == 'string' ? endpoints.find(e => e.name == endpoint) : endpoint; + if (ep.name.includes('.') { + return rej('INVALID_ENDPOINT'); + } + if (ep.secure && !isSecure) { return rej('ACCESS_DENIED'); } |