From 1518a0a16c7ac0fbe3b790173047b5fc28e02c37 Mon Sep 17 00:00:00 2001 From: William Casarin Date: Sat, 13 May 2023 19:51:06 -0700 Subject: [PATCH] zaps: ensure returned bolt11 is the correct amount --- damus/Util/Zap.swift | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/damus/Util/Zap.swift b/damus/Util/Zap.swift index a466b3dd..b240584b 100644 --- a/damus/Util/Zap.swift +++ b/damus/Util/Zap.swift @@ -293,5 +293,12 @@ func fetch_zap_invoice(_ payreq: LNUrlPayRequest, zapreq: NostrEvent?, sats: Int return nil } + // make sure it's the correct amount + guard let bolt11 = decode_bolt11(result.pr), + .specific(amount) == bolt11.amount + else { + return nil + } + return result.pr }