fix(amazon2): Incomplete URL substring sanitization

FlatIO · Nov 2, 2022 · 80e2d2e · 80e2d2e
1 parent 0d425e4
commit 80e2d2e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/amazon2.js b/lib/amazon2.js
@@ -159,7 +159,7 @@ module.exports.validatePurchase = function (dSecret, receipt, cb) {
 };
 
 function _isSandbox(path) {
-    return !path.startsWith(VALIDATION_HOST);
+    return !path.startsWith(`${VALIDATION_HOST}/`);
 }
 
 module.exports.getPurchaseData = function (purchase, options) {