forked from 3wordchant/capsul-flask
		
	fix bug when created query string is not present
This commit is contained in:
		| @ -72,7 +72,7 @@ def magiclink(token): | ||||
|         return redirect(url_for("console.index")) | ||||
|     else: | ||||
|         # this is here to prevent xss | ||||
|         if not re.match(r"^[a-zA-Z0-9_-]+$", token): | ||||
|         if token and not re.match(r"^[a-zA-Z0-9_-]+$", token): | ||||
|           token = '___________' | ||||
|  | ||||
|         abort(404, f"Token {token} doesn't exist or has already been used.") | ||||
|  | ||||
| @ -47,7 +47,7 @@ def index(): | ||||
|   created = request.args.get('created') | ||||
|  | ||||
|   # this is here to prevent xss | ||||
|   if not re.match(r"^(cvm|capsul)-[a-z0-9]{10}$", created): | ||||
|   if created and not re.match(r"^(cvm|capsul)-[a-z0-9]{10}$", created): | ||||
|     created = '___________' | ||||
|  | ||||
|   # for now we are going to check the IP according to the virt model | ||||
|  | ||||
		Reference in New Issue
	
	Block a user