From 0fb1c0363e3f3f87b5fc67b44027a263e269fa25 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Tue, 26 Mar 2024 06:17:36 +0000
Subject: validate amount

---
 lib/payments.js | 1 +
 1 file changed, 1 insertion(+)

(limited to 'lib')

diff --git a/lib/payments.js b/lib/payments.js
index 03085280..a754dc93 100644
--- a/lib/payments.js
+++ b/lib/payments.js
@@ -593,6 +593,7 @@ export let build = async ({ amount, address, feeRate, user, subtract }) => {
 
   let node = getNode(type);
   amount = parseInt(amount);
+  if (amount < 0) fail("invalid amount");
 
   let fees = await fetch(`${api[type]}/fees/recommended`).then((r) => r.json());
 
-- 
cgit v1.2.3