Add token length check to account info handler

12 months ago · be62fc939a
parent b1e67634df
commit be62fc939a
1 changed files with 5 additions and 0 deletions
--- a/api/account.go
+++ b/api/account.go
@ -41,6 +41,11 @@ func (s *Server) HandleAccountInfo(w http.ResponseWriter, r *http.Request) {
 		return
 	}

+	if len(token) != 32 {
+		http.Error(w, "invalid token", http.StatusBadRequest)
+		return
+	}
+
 	username, err := db.GetUsernameFromToken(token)
 	if err != nil {
 		http.Error(w, err.Error(), http.StatusBadRequest)