From aa129a870ea153f61038164d6ee7d93edf87ce33 Mon Sep 17 00:00:00 2001 From: mohammad mahdi rezaei Date: Wed, 24 Jan 2024 18:44:13 +0330 Subject: [PATCH] :lock:fix(delivery): fixed the security problem of the create benefactor kinfboxreq --- delivery/http_server/benefactor/kind_box_req/add.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/delivery/http_server/benefactor/kind_box_req/add.go b/delivery/http_server/benefactor/kind_box_req/add.go index 19f1314..849b96c 100644 --- a/delivery/http_server/benefactor/kind_box_req/add.go +++ b/delivery/http_server/benefactor/kind_box_req/add.go @@ -10,11 +10,12 @@ import ( ) func (h Handler) Add(c echo.Context) error { - claims := claim.GetClaimsFromEchoContext(c) - req := param.KindBoxReqAddRequest{BenefactorID: claims.UserID} + req := param.KindBoxReqAddRequest{} if bErr := c.Bind(&req); bErr != nil { return echo.NewHTTPError(http.StatusBadRequest) } + claims := claim.GetClaimsFromEchoContext(c) + req.BenefactorID = claims.UserID if fieldErrors, err := h.benefactorKindBoxReqVld.ValidateAddRequest(req); err != nil { msg, code := httpmsg.Error(err)