merchant

commit 9db8b714b6d7b6b97dd39139b7659a28e93707c2
parent 535ecdb94ee45ba7ed601d19c6029fe9fc420ac9
Author: Christian Grothoff <christian@grothoff.org>
Date:   Fri,  6 Feb 2026 21:07:48 +0100

add phone number validation against regex in backend

Diffstat:
M
src/backend/taler-merchant-httpd_private-patch-instances-ID.c
 | 
15
+++++++++++++++
M
src/backend/taler-merchant-httpd_private-post-instances.c
 | 
15
+++++++++++++++

2 files changed, 30 insertions(+), 0 deletions(-)
diff --git a/src/backend/taler-merchant-httpd_private-patch-instances-ID.c b/src/backend/taler-merchant-httpd_private-patch-instances-ID.c
@@ -210,6 +210,21 @@ patch_instances_ID (struct TMH_MerchantInstance *mi,
                                          TALER_EC_GENERIC_PARAMETER_MALFORMED,
                                          "phone_number");
     }
+    if ( (NULL != TMH_phone_regex) &&
+         (0 !=
+          regexec (&TMH_phone_rx,
+                   is.phone,
+                   0,
+                   NULL,
+                   0)) )
+    {
+      GNUNET_break_op (0);
+      GNUNET_JSON_parse_free (spec);
+      return TALER_MHD_reply_with_error (connection,
+                                         MHD_HTTP_BAD_REQUEST,
+                                         TALER_EC_GENERIC_PARAMETER_MALFORMED,
+                                         "phone_number");
+    }
   }
   if ( (NULL != is.email) &&
        (! TALER_MERCHANT_email_valid (is.email)) )
diff --git a/src/backend/taler-merchant-httpd_private-post-instances.c b/src/backend/taler-merchant-httpd_private-post-instances.c
@@ -179,6 +179,21 @@ post_instances (const struct TMH_RequestHandler *rh,
                                          TALER_EC_GENERIC_PARAMETER_MALFORMED,
                                          "phone_number");
     }
+    if ( (NULL != TMH_phone_regex) &&
+         (0 !=
+          regexec (&TMH_phone_rx,
+                   is.phone,
+                   0,
+                   NULL,
+                   0)) )
+    {
+      GNUNET_break_op (0);
+      GNUNET_JSON_parse_free (spec);
+      return TALER_MHD_reply_with_error (connection,
+                                         MHD_HTTP_BAD_REQUEST,
+                                         TALER_EC_GENERIC_PARAMETER_MALFORMED,
+                                         "phone_number");
+    }
   }
   if ( (NULL != is.email) &&
        (! TALER_MERCHANT_email_valid (is.email)) )