autonomic-cooperative/capsul-flask
1
0
Fork 0
Code Issues Pull Requests Projects Releases Activity

fix bug when created query string is not present

Browse Source
This commit is contained in:
forest 2020-05-16 23:28:21 -05:00
parent 684128361c
commit 62a062fff2
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
capsulflask/auth.py
View File

@ -72,7 +72,7 @@ def magiclink(token):
return redirect(url_for("console.index")) return redirect(url_for("console.index"))
else: else:
# this is here to prevent xss # this is here to prevent xss
if not re.match(r"^[a-zA-Z0-9_-]+$", token): if token and not re.match(r"^[a-zA-Z0-9_-]+$", token):
token = '___________' token = '___________'
abort(404, f"Token {token} doesn't exist or has already been used.") abort(404, f"Token {token} doesn't exist or has already been used.")

2
capsulflask/console.py
View File

@ -47,7 +47,7 @@ def index():
created = request.args.get('created') created = request.args.get('created')
# this is here to prevent xss # this is here to prevent xss
if not re.match(r"^(cvm|capsul)-[a-z0-9]{10}$", created): if created and not re.match(r"^(cvm|capsul)-[a-z0-9]{10}$", created):
created = '___________' created = '___________'
# for now we are going to check the IP according to the virt model # for now we are going to check the IP according to the virt model