Merge pull request #76 from hyunsooda/console-input-sanitization

console: Sanitization in inputBlockNumberFormatter
kaiachain · Aug 30, 2024 · 149854d · 149854d
2 parents c2d06a2 + 1811b01
commit 149854d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/console/jsre/deps/web3.js b/console/jsre/deps/web3.js
@@ -3848,8 +3848,10 @@ var inputBlockNumberFormatter = function (blockNumber) {
         return undefined;
     } else if (isPredefinedBlockNumber(blockNumber)) {
         return blockNumber;
+    } else if (/^\d+$/.test(blockNumber) || /^0x[0-9a-fA-F]+$/.test(blockNumber)) { // test if input is decmial or hex
+      return utils.toHex(blockNumber);
     }
-    return utils.toHex(blockNumber);
+    throw new Error(`input block number(${blockNumber}) is invalid`);
 };
 
 var inputEmptyFormatter = function (a) {