fix: Graceful Error Handling (#26)

pancakeswap · Feb 3, 2021 · 5d3cbf1 · 5d3cbf1 · vercel · Feb 3, 2021
1 parent 29ad401
commit 5d3cbf1
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/api/users/index.ts b/api/users/index.ts
@@ -1,5 +1,5 @@
 import { NowRequest, NowResponse } from "@vercel/node";
-import { isValidAddress, toChecksumAddress } from "ethereumjs-util";
+import { toChecksumAddress } from "ethereumjs-util";
 import { getModel } from "../../utils/mongo";
 
 export default async (req: NowRequest, res: NowResponse): Promise<NowResponse | void> => {
@@ -9,7 +9,9 @@ export default async (req: NowRequest, res: NowResponse): Promise<NowResponse |
 
   let { address } = req.query;
   address = address as string;
-  if (isValidAddress(address)) {
+
+  // Sanity check for address; to avoid any SQL-like injections, ...
+  if (address.match(/^0x[0-9a-fA-F]{40}$/)) {
     const userModel = await getModel("User");
     const user = await userModel.findOne({ address: address.toLowerCase() }).lean();
     if (!user) {