[openstreetmap-website] Insufficient input checking on note creation (#311)

Toby Murray notifications at github.com
Thu Jun 20 17:31:47 UTC 2013

Sending non-numeric characters for lat/lon when creating a note results in the note getting created at 0,0. To reproduce on the dev API:

```curl --data "lat=a&lon=b&text=testtesttest" http://master.apis.dev.openstreetmap.org/api/0.6/notes```

Instead, this should return an error, probably the same as is returned when lat/lon are out of bounds.

Reply to this email directly or view it on GitHub:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20130620/295e3ae6/attachment.html>

More information about the rails-dev mailing list