sikkienl/dash
1
0
Fork 0
mirror of https://github.com/dashpay/dash.git synced 2024-12-26 12:32:48 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #598 from crowning-/v0.12.1.x

Browse Source 
Security: sanitize mnbudget prepare|submit names and URLs
This commit is contained in:
evan82 2015-09-11 14:45:21 -07:00
commit 356c616b98
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/rpcmasternode-budget.cpp
View File

@ -62,11 +62,11 @@ Value mnbudget(const Array& params, bool fHelp)
if (params.size() != 7)
throw runtime_error("Correct usage is 'mnbudget prepare proposal-name url payment_count block_start dash_address monthly_payment_dash'");
std::string strProposalName = params[1].get_str();
std::string strProposalName = SanitizeString(params[1].get_str());
if(strProposalName.size() > 20)
return "Invalid proposal name, limit of 20 characters.";
std::string strURL = params[2].get_str();
std::string strURL = SanitizeString(params[2].get_str());
if(strURL.size() > 64)
return "Invalid url, limit of 64 characters.";
@ -142,11 +142,11 @@ Value mnbudget(const Array& params, bool fHelp)
// Check these inputs the same way we check the vote commands:
// **********************************************************
std::string strProposalName = params[1].get_str();
std::string strProposalName = SanitizeString(params[1].get_str());
if(strProposalName.size() > 20)
return "Invalid proposal name, limit of 20 characters.";
std::string strURL = params[2].get_str();
std::string strURL = SanitizeString(params[2].get_str());
if(strURL.size() > 64)
return "Invalid url, limit of 64 characters.";