Open Hyodar opened 3 weeks ago
doing a non-nil check on the signed message signature
Could you elaborate on this?
adding bounds to the checkpoint messages fetching
Added on #250
Could you elaborate on this?
The signed messages .Signature
is a pointer, even though the signed message struct itself is a value.
Basically in all API routes (REST and RPC) we are not validating parameters enough. For example, doing a non-nil check on the signed message signature or adding bounds to the checkpoint messages fetching.