oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Validate merger type before asking permission

Browse source
This commit is contained in:
shortcutme 2018-11-21 19:28:11 +01:00
parent 224a354480
commit 3fd44a1813
No known key found for this signature in database
GPG key ID: 5B63BAE6CB9613AE
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
plugins/MergerSite/MergerSitePlugin.py
View file

@ -212,6 +212,8 @@ class UiWebsocketPlugin(object):
return super(UiWebsocketPlugin, self).actionPermissionDetails(to, permission) return super(UiWebsocketPlugin, self).actionPermissionDetails(to, permission)
merger_type = permission.replace("Merger:", "") merger_type = permission.replace("Merger:", "")
if not re.match("^[A-Za-z0-9-]+$", merger_type):
raise Exception("Invalid merger_type: %s" % merger_type)
merged_sites = [] merged_sites = []
for address, merged_type in merged_db.iteritems(): for address, merged_type in merged_db.iteritems():
if merged_type != merger_type: if merged_type != merger_type: