sanitize_input__rzdoc_name(): handle empty requests, strip incoming rzdoc names

1 files changed, 4 insertions, 0 deletions

diff --git a/src/server/rz_api_common.py b/src/server/rz_api_common.py
index d2692898..b9dc42a9 100644
--- a/src/server/rz_api_common.py
+++ b/src/server/rz_api_common.py
@@ -55,10 +55,14 @@ def sanitize_input__rzdoc_name(rzdoc_name):
     """
     sanitize rzdoc name raw input
     """
+    if None == rzdoc_name or 0 == len(rzdoc_name):
+        raise API_Exception__bad_request('rzdoc: open request: empty doc name')
+
     if None != rzdoc_name and len(rzdoc_name) > current_app.rz_config.rzdoc__name__max_length:
         raise API_Exception__bad_request('rzdoc: open request: doc name exceeds max doc name limit: %s' % (rzdoc_name))
 
     # FIXME: fail on HTML escape codes, UTF handling, etc
+    rzdoc_name = rzdoc_name.strip() # make sure we ommit trailing white spaces from doc name
 
     return rzdoc_name