Merge pull request #92 from ChainSafe/irubido/pcztHexValidate

pczt hex validation

Author: irubido

packages/snap/snap.manifest.json

@@ -7,7 +7,7 @@
     "url": "https://github.com/ChainSafe/WebZjs.git"
   },
   "source": {
-    "shasum": "iAfsbWYVP8O3rjK7Dp2FCpaoaeVaN7y5znqpVZ2c1nw=",
+    "shasum": "kF01k16izYSjCweSFMJBg0hcaJq89Ngegf17gcSt+Tg=",
     "location": {
       "npm": {
         "filePath": "dist/bundle.js",

packages/snap/src/rpc/signPczt.tsx

@@ -25,7 +25,7 @@ export async function signPczt({ pcztHexTring, signDetails }: SignPcztParams, or
           <Text>Amount: {signDetails.amount}</Text>
           <Divider />
           <Text>PCZT hex to sign</Text>
-          <Copyable value={pcztHexTring}/>
+          <Copyable value={pcztHexTring} />
         </Box>
       ),
     },
@@ -40,7 +40,11 @@ export async function signPczt({ pcztHexTring, signDetails }: SignPcztParams, or
   // Generate the UnifiedSpendingKey and obtain the Viewing Key
   const spendingKey = new UnifiedSpendingKey('main', seed, 0);
   const seedFp = new SeedFingerprint(seed);
- 
+
+  if (!/^[0-9a-fA-F]+$/.test(pcztHexTring)) {
+    throw new Error('pcztHexTring must be valid hex');
+  }
+
   const pcztBuffer = Buffer.from(pcztHexTring, 'hex');