From: Chris Duncan <chris@codecow.com>
Date: Sun, 9 Aug 2026 09:40:40 +0000 (-0700)
Subject: Throw if more than one index passed in signing request.
X-Git-Url: https://git.codecow.com/?a=commitdiff_plain;h=145a196171ecb1651ffc0d3c5f28576a16b6b892;p=libnemo.git

Throw if more than one index passed in signing request.
---

diff --git a/src/lib/vault/vault-worker.ts b/src/lib/vault/vault-worker.ts
index d507b1e..c54bedb 100644
--- a/src/lib/vault/vault-worker.ts
+++ b/src/lib/vault/vault-worker.ts
@@ -263,6 +263,9 @@ function sign (index?: Uint32Array, data?: ArrayBuffer): Promise<Record<string,
 		if (index == null) {
 			throw new VaultError('Wallet account index is required to sign')
 		}
+		if (index.length !== 1) {
+			throw new VaultError('Wallet cannot sign from multiple account indexes')
+		}
 		if (data == null) {
 			throw new VaultError('Data to sign not found')
 		}