Fix #3745 (#3746)

src/server/web/index.ts

@@ -8,6 +8,7 @@ import * as Router from 'koa-router';
 import * as send from 'koa-send';
 import * as favicon from 'koa-favicon';
 import * as views from 'koa-views';
+import { ObjectID } from 'mongodb';
 
 import docs from './docs';
 import packFeed from './feed';
@@ -149,18 +150,22 @@ router.get('/@:user', async (ctx, next) => {
 
 // Note
 router.get('/notes/:note', async ctx => {
+	if (ObjectID.isValid(ctx.params.note)) {
 		const note = await Note.findOne({ _id: ctx.params.note });
 
-	if (note != null) {
+		if (note) {
 			const _note = await packNote(note);
 			await ctx.render('note', {
 				note: _note,
 				summary: getNoteSummary(_note)
 			});
 			ctx.set('Cache-Control', 'private, max-age=0, must-revalidate');
-	} else {
-		ctx.status = 404;
+			
+			return;
 		}
+	}
+
+	ctx.status = 404;
 });
 //#endregion