From e0df3d4208897770c90bfb9c6249e8d5db047064 Mon Sep 17 00:00:00 2001
From: Ajay Ramachandran <dev@ajay.app>
Date: Sun, 11 Oct 2020 14:11:20 -0400
Subject: [PATCH] Don't allow dots in videoID

---
 src/utils/youtubeAPI.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/utils/youtubeAPI.js b/src/utils/youtubeAPI.js
index a053eb1..1deb3b2 100644
--- a/src/utils/youtubeAPI.js
+++ b/src/utils/youtubeAPI.js
@@ -19,6 +19,11 @@ if (config.mode === "test") {
 
     // YouTubeAPI.videos.list wrapper with cacheing
     exportObject.listVideos = (videoID, part, callback) => {
+        if (videoID.length !== 11 || videoID.includes(".")) {
+            callback("Invalid video ID");
+            return;
+        }
+
         let redisKey = "youtube.video." + videoID + "." + part;
         redis.get(redisKey, (getErr, result) => {
             if (getErr || !result) {