search

jorgearanda / fish

A fish banks simulator to conduct environmental psychology studies
MIT License
5 stars 5 forks source link

accountId in /a/:accountId is not checked #179

Closed btruhand closed 9 years ago

btruhand commented 9 years ago

I noticed that the parameter accountId is not checked whether or not it is actually a legitimate ID thus I can do something like /a/NOTVALID/ and it would still render the dashboard page, but this leads to subsequent links to either misbehave or crash

jorgearanda commented 9 years ago

Good find, thanks!