libeufin

commit 71aa5ab6c70bc3c5d0882d1d3a9fdf2b50048272
parent 4887d87c0be652b21fcf6f2c6d6dde2b05dd4a66
Author: ms <ms@taler.net>
Date:   Wed, 22 Mar 2023 22:12:40 +0100

sanity checks

Diffstat:
M
sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
 | 
4
++++

1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt b/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
@@ -1484,10 +1484,14 @@ val sandboxApp: Application.() -> Unit = {
                         throw forbidden("Cannot access bank account ${bankAccount.label}")
                     // Paging values.
                     val page: Int = expectInt(call.request.queryParameters["page"] ?: "1")
+                    if (page < 1) throw badRequest("'page' param is less than 1")
                     val size: Int = expectInt(call.request.queryParameters["size"] ?: "5")
+                    if (size < 1) throw badRequest("'size' param is less than 1")
                     // Time range filter values
                     val fromMs = expectLong(call.request.queryParameters["from_ms"] ?: "0")
+                    if (fromMs < 0) throw badRequest("'from_ms' param is less than 0")
                     val untilMs = expectLong(call.request.queryParameters["until_ms"] ?: Long.MAX_VALUE.toString())
+                    if (untilMs < 0) throw badRequest("'until_ms' param is less than 0")
                     val ret = mutableListOf<RawPayment>()
                     /**
                      * Case where page number wasn't given,