From d7eb808190ccebdb5a833694512cd14e5ffc6751 Mon Sep 17 00:00:00 2001
From: Adhidarma Hadiwinoto <adhisimon@gmail.com>
Date: Thu, 10 Nov 2022 10:58:15 +0700
Subject: [PATCH] Pengamanan terminal name bukan string pada topup
---
lib/partner-listener/routers/topup.js | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/lib/partner-listener/routers/topup.js b/lib/partner-listener/routers/topup.js
index f157a30..f9f8fba 100644
--- a/lib/partner-listener/routers/topup.js
+++ b/lib/partner-listener/routers/topup.js
@@ -33,7 +33,8 @@ function onInvalidParameter(missingParameter, req, res) {
function pagePrerequisite(req, res, next) {
if (!req.body) req.body = {};
- if (!req.body.terminal_name && !req.query.terminal_name) {
+ const terminalName = req.body.terminal_name || req.query.terminal_name;
+ if (!terminalName || typeof terminalName !== 'string') {
onInvalidParameter('terminal_name', req, res);
return;
}
--
1.9.0