diff --git a/src/node/db/API.js b/src/node/db/API.js index fa1fd3056..d2ff92062 100644 --- a/src/node/db/API.js +++ b/src/node/db/API.js @@ -723,8 +723,9 @@ exports.createPad = function(padID, text, callback) callback(new customError("createPad can't create group pads","apierror")); return; } + //check for url special characters - else if(padID.match(/(\/|\?|&|#)/)) + if(padID.match(/(\/|\?|&|#)/)) { callback(new customError("malformed padID: Remove special characters","apierror")); return;