Merge pull request #19 from srtucker22/patch-1

a check to fight XSS nastiness
artwells · Mar 3, 2015 · 471c503 · 471c503
2 parents 557c0bf + 82ebd08
commit 471c503
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/accounts-guest-server.js b/accounts-guest-server.js
@@ -13,6 +13,8 @@ Accounts.removeOldGuests = function (before) {
 Meteor.methods({
     createGuest: function (email)
     {
+        check(email, Match.OneOf(String, null, undefined));
+
         /* if explicitly disabled, happily do nothing */
         if (AccountsGuest.enabled === false){
             return true;