From 06e57b020ae3c91ddb7d4faefce7b17f561170ab Mon Sep 17 00:00:00 2001 From: LV-426 Date: Sat, 6 Dec 2014 21:32:54 +0200 Subject: /index: safe template var filling --- src-py/rhizi_api.py | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) (limited to 'src-py') diff --git a/src-py/rhizi_api.py b/src-py/rhizi_api.py index 2ba25ad8..829bb6c7 100644 --- a/src-py/rhizi_api.py +++ b/src-py/rhizi_api.py @@ -6,11 +6,19 @@ import db_controller as dbc import json import logging import traceback -from flask import jsonify +import crypt_util +import flask +from flask import jsonify from flask import Flask from flask import request from flask import make_response +from flask import session +from flask import redirect +from flask import escape +from flask import url_for +from flask import render_template +from flask import send_from_directory from model.graph import Topo_Diff from model.graph import Attr_Diff @@ -180,7 +188,7 @@ def monitor__server_info(): "

" def index(): - username = escape(session['username']) + username = escape(session.get('username')) return render_template('index.html', username=username) def login(): @@ -213,3 +221,4 @@ def logout(): u = session.pop('username', None) log.debug('logout: success: user: %s' % (u)) return redirect(url_for('login')) + -- cgit v1.3.1