offerArgs not validated

[dckc]

Per offerArgs docs:

Contract code should be careful interacting with offerArgs. These values need input validation before being used since they are coming directly from the caller and may have malicious behavior.

Malformed or excessively large proofs can lead to performance degradation or bypass validation mechanisms.

Suggestion: use pattern validation, much like proposal shapes

ack: @Jovonni

[tgrecojs]

closing this out as offerArgs validation was implemented in #149

Below is the relevant snippet that now exists in the main branch:

dapp-ertp-airdrop/contract/src/airdrop.contract.js

Lines 29 to 38 in a442ac0

	const ProofDataShape = harden({
	hash: M.string(),
	direction: M.string(),
	});
	const OfferArgsShape = harden({
	tier: M.number(),
	key: M.string(),
	proof: M.arrayOf(ProofDataShape),
	});