diff options
| author | LV-426 <lv-426@taproot.org.il> | 2015-04-10 19:00:03 +0300 |
|---|---|---|
| committer | LV-426 <lv-426@taproot.org.il> | 2015-04-10 19:00:03 +0300 |
| commit | f9291579e1454dfd7e4468675721745c9e977de8 (patch) | |
| tree | 25341fc9ae206aea52fbbbfa38284bc8736a788e /src/server/rz_api_common.py | |
| parent | 65cc4a76729d9640edbf5e528d7053fa17e17623 (diff) | |
sanitize_input__rzdoc_name(): strip first...
Diffstat (limited to 'src/server/rz_api_common.py')
| -rw-r--r-- | src/server/rz_api_common.py | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/src/server/rz_api_common.py b/src/server/rz_api_common.py index b9dc42a9..343d5b42 100644 --- a/src/server/rz_api_common.py +++ b/src/server/rz_api_common.py @@ -51,10 +51,12 @@ def sanitize_input__topo_diff(topo_diff): def sanitize_input__attr_diff(attr_diff): pass # TODO: impl -def sanitize_input__rzdoc_name(rzdoc_name): +def sanitize_input__rzdoc_name(rzdoc_name_raw): """ sanitize rzdoc name raw input """ + rzdoc_name = rzdoc_name_raw.strip() # make sure we ommit trailing white spaces from doc name + if None == rzdoc_name or 0 == len(rzdoc_name): raise API_Exception__bad_request('rzdoc: open request: empty doc name') @@ -62,7 +64,6 @@ def sanitize_input__rzdoc_name(rzdoc_name): raise API_Exception__bad_request('rzdoc: open request: doc name exceeds max doc name limit: %s' % (rzdoc_name)) # FIXME: fail on HTML escape codes, UTF handling, etc - rzdoc_name = rzdoc_name.strip() # make sure we ommit trailing white spaces from doc name return rzdoc_name |
