[API] Fix: Validate id

2017-01-20 17:51:31 +09:00 · 2017-01-20 17:51:31 +09:00 · 2cc2ecb13c
parent e31eec542f
commit 2cc2ecb13c
1 changed files with 5 additions and 0 deletions
--- a/src/api/endpoints/posts/likes/create.js
+++ b/src/api/endpoints/posts/likes/create.js
@ -28,6 +28,11 @@ module.exports = (params, user) =>
 		return rej('post_id is required');
 	}

+	// Validate id
+	if (!mongo.ObjectID.isValid(postId)) {
+		return rej('incorrect post_id');
+	}
+
 	// Get likee
 	const post = await Post.findOne({
 		_id: new mongo.ObjectID(postId)