diff options
| author | LV-426 <lv-426@taproot.org.il> | 2015-04-09 01:55:37 +0300 |
|---|---|---|
| committer | LV-426 <lv-426@taproot.org.il> | 2015-04-09 02:03:46 +0300 |
| commit | 913b04022b3cd929f4b5fe4ec83f04821a428430 (patch) | |
| tree | 01ae14e3ce69d195a678ebe1cf958c3bee7f267c /src/server | |
| parent | f9dcd64ecf6e1ad534bcbcc48b9b9e3526db49ab (diff) | |
resolve #439 with safe filter (|safe), avoid extra code in index.html
Diffstat (limited to 'src/server')
| -rw-r--r-- | src/server/rz_api_common.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/server/rz_api_common.py b/src/server/rz_api_common.py index 83d29b7c..d2692898 100644 --- a/src/server/rz_api_common.py +++ b/src/server/rz_api_common.py @@ -58,6 +58,8 @@ def sanitize_input__rzdoc_name(rzdoc_name): if None != rzdoc_name and len(rzdoc_name) > current_app.rz_config.rzdoc__name__max_length: raise API_Exception__bad_request('rzdoc: open request: doc name exceeds max doc name limit: %s' % (rzdoc_name)) + # FIXME: fail on HTML escape codes, UTF handling, etc + return rzdoc_name def validate_obj__attr_diff(attr_diff): |