fix(core-p2p): ensure asset recipientId and amount are strings

ArkEcosystem · Dec 3, 2020 · 29eaf10 · 29eaf10
1 parent c6d7421
commit 29eaf10
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/packages/core-p2p/src/socket-server/utils/validate.ts b/packages/core-p2p/src/socket-server/utils/validate.ts
@@ -35,7 +35,13 @@ export const validateTransactionLight = (transaction: any): boolean => {
                 return false;
             }
             for (const p of transaction.asset.payments) {
-                if (!p || typeof p !== "object" || Object.keys(p).length !== 2 || !p.recipientId || !p.amount) {
+                if (
+                    !p ||
+                    typeof p !== "object" ||
+                    typeof p.recipientId !== "string" ||
+                    typeof p.amount !== "string" ||
+                    Object.keys(p).length !== 2
+                ) {
                     return false;
                 }
             }