mirror of
https://github.com/XRPLF/rippled.git
synced 2025-12-06 17:27:55 +00:00
Don't let clients get tx history arbitrarily far back.
This commit is contained in:
@@ -1803,6 +1803,10 @@ Json::Value RPCHandler::doTxHistory (Json::Value params, LoadType* loadType, App
|
||||
return rpcError (rpcINVALID_PARAMS);
|
||||
|
||||
unsigned int startIndex = params["start"].asUInt ();
|
||||
|
||||
if ((startIndex > 10000) && (mRole != ADMIN))
|
||||
return rpcError (rpcNO_PERMISSION);
|
||||
|
||||
Json::Value obj;
|
||||
Json::Value txs;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user