ajanata / PretendYoureXyzzy

A web clone of the card game Cards Against Humanity.
https://pretendyoure.xyz/zy
BSD 2-Clause "Simplified" License
1.23k stars 397 forks source link

Possible to set blank limit (and probably other limits) beyond permissible range. #103

Closed ajanata closed 10 years ago

ajanata commented 10 years ago

The server doesn't verify that the client is passing in values within the allowed range, so something like this:

$('#blanks_limit_30')[0].options.add($("<option value='90'>90</option>"))

will allow you to have 90 blank cards in a game (if you are the host in game 30).

gwemmie commented 8 years ago

I would call this a feature, not a bug. Why not allow players to have more blank cards than 30?