fix(purity): modify _submit to check both initcode and runtime (#21)

* fix: check runtime in _submit

* fix: add back initcode check

src/CurtaGolf.sol

@@ -183,7 +183,7 @@ contract CurtaGolf is ICurtaGolf, KingERC721, Owned {
         // Revert if the course does not exist.
         if (address(courseData.course) == address(0)) revert CourseDoesNotExist(_courseId);
 
-        // Revert if the solution contains invalid opcodes.
+        // Revert if the initcode contains invalid opcodes.
         if (!purityChecker.check(_solution, getAllowedOpcodes[_courseId])) {
             revert PollutedSolution();
         }
@@ -194,6 +194,11 @@ contract CurtaGolf is ICurtaGolf, KingERC721, Owned {
             target := create(0, add(_solution, 0x20), mload(_solution))
         }
 
+        // Revert if the runtime contains invalid opcodes.
+        if (!purityChecker.check(target.code, getAllowedOpcodes[_courseId])) {
+            revert PollutedSolution();
+        }
+
         // Run solution and mint NFT if it beats the leading score.
         uint32 gasUsed = courseData.course.run(target, block.prevrandao);
         if (courseData.gasUsed == 0 || gasUsed < courseData.gasUsed) {