checked number before parseInt

v1.18.x
Spiritlebon 11 years ago
parent 35fc175ff6
commit 2b15de63c0

@ -404,7 +404,7 @@ SocketTopics.follow = function(socket, tid, callback) {
};
SocketTopics.loadMore = function(socket, data, callback) {
if(!data || !data.tid || (parseInt(data.after, 10) < 0)) {
if(!data || !data.tid || !utils.isNumber(data.after) || parseInt(data.after, 10) < 0) {
return callback(new Error('[[error:invalid-data]]'));
}

Loading…
Cancel
Save