poanetwork / token-wizard

(Discontinued) TokenWizard is an DApp to create and manage crowdsale and token contracts using a simple UI
MIT License
384 stars 215 forks source link

(Fix) add checks for validity of query string #944

Closed vbaranov closed 6 years ago

vbaranov commented 6 years ago

Problem: we don't check the validity of input data in query string Solution: add checks for exec-id:

  1. the length of the execution id (it always 256 bits long)
  2. as exec-id is a hexademical representation of the data, we need to check all symbols in a hash string: [0-9a-fA-F]

networkID: check, that it is an integer number