[extensions-web] extension-info: handle wrong input pk



commit 587eefd9c41dc4719584ffa39a93f3085aeb1a97
Author: Yuri Konotopov <ykonotopov gnome org>
Date:   Mon Feb 6 13:04:07 2017 +0400

    extension-info: handle wrong input pk

 sweettooth/extensions/views.py |    5 ++++-
 1 files changed, 4 insertions(+), 1 deletions(-)
---
diff --git a/sweettooth/extensions/views.py b/sweettooth/extensions/views.py
index 5bd9a1a..adbf7fc 100644
--- a/sweettooth/extensions/views.py
+++ b/sweettooth/extensions/views.py
@@ -337,7 +337,10 @@ def ajax_details(extension, version=None):
 @ajax_view
 def ajax_details_view(request):
     uuid = request.GET.get('uuid', None)
-    pk = request.GET.get('pk', None)
+    try:
+        pk = int(request.GET.get('pk', None))
+    except (TypeError, ValueError):
+        raise Http404()
 
     if uuid is not None:
         extension = get_object_or_404(models.Extension.objects.visible(), uuid=uuid)


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]