Fix missing input validation

This commit is contained in:
Yarmo Mackenbach 2022-09-10 16:19:53 +02:00
parent b7abdaa009
commit b8f5ec7c1e
No known key found for this signature in database
GPG key ID: 37367F4AF4087AD1

View file

@ -177,7 +177,9 @@ router.get(
// Telegram route
router.get(
'/get/telegram', query('chat').isString(),
'/get/telegram',
query('user').isString(),
query('chat').isString(),
async (req, res) => {
if (!opts.claims.telegram.token) {
return res.status(501).json({ errors: 'Telegram not enabled on server' })