Tim Abbott 3da06fecd5 invite: Fix validation of referred_by field. ...

Previously, we could 500 if an organization administrator scanned
possible PreregistrationUser IDs looking for a valid invitation they
can interact with.

They couldn't do anything, so no security issue, but this fixes that
case to just be a 400 error as it should be.

2019-03-21 16:31:18 -07:00

238 KiB

Raw Blame History

View Raw