Fix parameter sanitization

Author: TristanDamron

src/index.js

@@ -27,7 +27,7 @@ app.get("/registry", async (req, res) => {
 })
 
 app.post("/registry", async (req, res) => {
-    const keyVal = await sanitizeString(key(req.body))
+    const keyVal = await key(req.body)
     const urlVal = sanitizeString(url(req.body))
     const titleVal = sanitizeString(checkForBannedWords(req.body, "title"))
     const descriptionVal = sanitizeString(checkForBannedWords(req.body, "description"))

src/utils.js

@@ -16,8 +16,9 @@ export function orderBy(body) {
 }
 
 export async function key(body) {
-    const keyVal = body.hasOwnProperty("key") ? body["key"] : ""
+    const keyVal = body.hasOwnProperty("key") ? sanitizeString(body["key"]) : ""
     if ((await db.result(`SELECT * FROM users WHERE key = '${keyVal}'`, null, r => r.rowCount)) === 0) return ""
+    return keyVal
 }
 
 export function searchByTag(body) {