sanitize all the things, don't crash

apostrophecms-legacy · Jun 16, 2014 · 82911e2 · 82911e2
1 parent 2b12e9f
commit 82911e2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/index.js b/index.js
@@ -51,8 +51,8 @@ function Construct(options, callback) {
   var url;
 
   app.get('/apos-twitter/feed', function(req, res) {
-    var username = req.query.username;
-    var hashtag = req.query.hashtag;
+    var username = apos.sanitizeString(req.query.username);
+    var hashtag = apos.sanitizeString(req.query.hashtag);
 
     if (!username.length) {
       res.statusCode = 404;