gnunet-svn
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[libeufin] branch master updated: address information leak


From: gnunet
Subject: [libeufin] branch master updated: address information leak
Date: Sat, 07 Dec 2019 04:25:47 +0100

This is an automated email from the git hooks/post-receive script.

marcello pushed a commit to branch master
in repository libeufin.

The following commit(s) were added to refs/heads/master by this push:
     new 7be61e5  address information leak
7be61e5 is described below

commit 7be61e5457e17a6f9626137b7d5d0beb8e8b37ec
Author: Marcello Stanisci <address@hidden>
AuthorDate: Sat Dec 7 04:24:35 2019 +0100

    address information leak
---
 sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt 
b/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
index 11ee7c6..4f95d55 100644
--- a/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
+++ b/sandbox/src/main/kotlin/tech/libeufin/sandbox/Main.kt
@@ -155,7 +155,7 @@ fun main() {
             bankCustomer = customerEntity
         }
 
-        for (i in IntRange(0, 4) + IntRange(6, 10)) {
+        for (i in listOf(1, 3, 9, 10)) {
             BankTransactionEntity.new {
                 counterpart = "IBAN"
                 amount = Amount(5 - i)
@@ -207,9 +207,12 @@ fun main() {
                 val ret = CustomerHistoryResponse()
 
                 transaction {
+                    val customer = findCustomer(call.parameters["id"])
 
                     BankTransactionEntity.find {
-                        BankTransactionsTable.date.between(startDate, endDate)
+                        BankTransactionsTable.localCustomer eq customer.id and
+                                BankTransactionsTable.date.between(startDate, 
endDate)
+
                     }.forEach {
                         ret.history.add(
                             CustomerHistoryResponseElement(
@@ -242,7 +245,7 @@ fun main() {
                 call.respond(
                     CustomerBalance(
                     name = name,
-                    balance = "EUR:${balance}"
+                    balance = "${balance} EUR"
                     )
                 )
 

-- 
To stop receiving notification emails like this one, please contact
address@hidden.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]