fix bug when created query string is not present

This commit is contained in:
forest 2020-05-16 23:28:21 -05:00
parent 684128361c
commit 62a062fff2
2 changed files with 2 additions and 2 deletions

View File

@ -72,7 +72,7 @@ def magiclink(token):
return redirect(url_for("console.index"))
else:
# this is here to prevent xss
if not re.match(r"^[a-zA-Z0-9_-]+$", token):
if token and not re.match(r"^[a-zA-Z0-9_-]+$", token):
token = '___________'
abort(404, f"Token {token} doesn't exist or has already been used.")

View File

@ -47,7 +47,7 @@ def index():
created = request.args.get('created')
# this is here to prevent xss
if not re.match(r"^(cvm|capsul)-[a-z0-9]{10}$", created):
if created and not re.match(r"^(cvm|capsul)-[a-z0-9]{10}$", created):
created = '___________'
# for now we are going to check the IP according to the virt model