From 65cc4a76729d9640edbf5e528d7053fa17e17623 Mon Sep 17 00:00:00 2001 From: LV-426 Date: Fri, 10 Apr 2015 18:56:24 +0300 Subject: sanitize_input__rzdoc_name(): handle empty requests, strip incoming rzdoc names --- src/server/rz_api_common.py | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src') diff --git a/src/server/rz_api_common.py b/src/server/rz_api_common.py index d2692898..b9dc42a9 100644 --- a/src/server/rz_api_common.py +++ b/src/server/rz_api_common.py @@ -55,10 +55,14 @@ def sanitize_input__rzdoc_name(rzdoc_name): """ sanitize rzdoc name raw input """ + if None == rzdoc_name or 0 == len(rzdoc_name): + raise API_Exception__bad_request('rzdoc: open request: empty doc name') + if None != rzdoc_name and len(rzdoc_name) > current_app.rz_config.rzdoc__name__max_length: raise API_Exception__bad_request('rzdoc: open request: doc name exceeds max doc name limit: %s' % (rzdoc_name)) # FIXME: fail on HTML escape codes, UTF handling, etc + rzdoc_name = rzdoc_name.strip() # make sure we ommit trailing white spaces from doc name return rzdoc_name -- cgit v1.3.1