Merge pull request #11706 from Expensify/arosiclair-owrv-safety

Add safety checks for policy API reads
Expensify · Oct 11, 2022 · 757fb5e · 757fb5e
2 parents d99d7c8 + e4b3fdb
commit 757fb5e
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/src/libs/actions/Policy.js b/src/libs/actions/Policy.js
@@ -13,6 +13,7 @@ import ROUTES from '../../ROUTES';
 import * as OptionsListUtils from '../OptionsListUtils';
 import DateUtils from '../DateUtils';
 import * as ReportUtils from '../ReportUtils';
+import Log from '../Log';
 
 const allPolicies = {};
 Onyx.connect({
@@ -939,17 +940,32 @@ function createWorkspace() {
 }
 
 function openWorkspaceReimburseView(policyID) {
+    if (!policyID) {
+        Log.warn('openWorkspaceReimburseView invalid params', {policyID});
+        return;
+    }
+
     API.read('OpenWorkspaceReimburseView', {policyID});
 }
 
 function openWorkspaceMembersPage(policyID, clientMemberEmails) {
+    if (!policyID || !clientMemberEmails) {
+        Log.warn('openWorkspaceMembersPage invalid params', {policyID, clientMemberEmails});
+        return;
+    }
+
     API.read('OpenWorkspaceMembersPage', {
         policyID,
         clientMemberEmails: JSON.stringify(clientMemberEmails),
     });
 }
 
 function openWorkspaceInvitePage(policyID, clientMemberEmails) {
+    if (!policyID || !clientMemberEmails) {
+        Log.warn('openWorkspaceInvitePage invalid params', {policyID, clientMemberEmails});
+        return;
+    }
+
     API.read('OpenWorkspaceInvitePage', {
         policyID,
         clientMemberEmails: JSON.stringify(clientMemberEmails),