From 2baa74d5204a29150767cb090937e54620ec7b83 Mon Sep 17 00:00:00 2001 From: Andrey Chervyakov Date: Thu, 18 Mar 2021 23:17:18 +0600 Subject: [PATCH] Fix links retrieval handler allowing negative limit and offset values --- link/handlers.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/link/handlers.go b/link/handlers.go index aa7c178..912372d 100644 --- a/link/handlers.go +++ b/link/handlers.go @@ -53,7 +53,7 @@ func allRetrievalHandler(ctx echo.Context, serv Service) error { limit := 20 if v := ctx.QueryParam("limit"); v != "" { num, err := strconv.Atoi(v) - if err != nil { + if err != nil || num < 0 { return echo.NewHTTPError(http.StatusBadRequest, "Invalid limit value.") } @@ -63,7 +63,7 @@ func allRetrievalHandler(ctx echo.Context, serv Service) error { offset := 0 if v := ctx.QueryParam("offset"); v != "" { num, err := strconv.Atoi(v) - if err != nil { + if err != nil || num < 0 { return echo.NewHTTPError(http.StatusBadRequest, "Invalid offset value.") }