constrain memo length

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/invoices.js b/lib/invoices.js
index 6962898a..89c4f3d6 100644
--- a/lib/invoices.js
+++ b/lib/invoices.js
@@ -28,6 +28,7 @@ export let generate = async ({ invoice, user, sender, }) => {
     secret,
   } = invoice;
 
+
   amount = parseInt(amount || 0);
   tip = parseInt(tip) || null;
 
@@ -39,6 +40,7 @@ export let generate = async ({ invoice, user, sender, }) => {
   if (!rate) rate = store.rates[currency];
   if (fiat) amount = Math.round((SATS * fiat) / rate);
   if (amount < 0) fail("invalid amount");
+  if (memo && memo.length > 200) fail("memo too long");
 
   let id = v4();