feat(clusterbuster): Make sure we escape x, y and z (#53)

* feat(clusterbuster): Make sure we escape x, y and z * feat(clusterbuster): In case of invalid x,y or z throw errors
chargetrip · Jun 29, 2020 · a47d246 · a47d246
1 parent 4da2914
commit a47d246
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/lib/tiler.ts b/lib/tiler.ts
@@ -63,6 +63,17 @@ export async function TileServer<T>({
       }
       let query: string;
 
+      z = parseInt(`${z}`, 10);
+      if (isNaN(z)) {
+        throw new Error('Invalid zoom level');
+      }
+
+      x = parseInt(`${x}`, 10);
+      y = parseInt(`${y}`, 10);
+      if (isNaN(x) || isNaN(y)) {
+        throw new Error('Invalid tile coordinates');
+      }
+
       try {
         query = createQueryForTile({
           z,