API doesn't check if the data is valid

lankybox02 / RiverBox

The simple social media app.

https://lankybox02.github.io/RiverBox/

7 stars 4 forks source link

Open lankybox02 opened 2 years ago

lankybox02 commented 2 years ago

You can simply crash the API by sending a blank request. The API will try to read a non-existent key, therefore crashing.

lankybox02 commented 2 years ago

Posting to / crashes the API

lankybox02 commented 2 years ago

Working on a new routed API that solves this

lankybox02 commented 2 years ago

sending a request with quotes in a value can mess up stuff