From f9291579e1454dfd7e4468675721745c9e977de8 Mon Sep 17 00:00:00 2001 From: LV-426 Date: Fri, 10 Apr 2015 19:00:03 +0300 Subject: sanitize_input__rzdoc_name(): strip first... --- src/server/rz_api_common.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/server/rz_api_common.py b/src/server/rz_api_common.py index b9dc42a9..343d5b42 100644 --- a/src/server/rz_api_common.py +++ b/src/server/rz_api_common.py @@ -51,10 +51,12 @@ def sanitize_input__topo_diff(topo_diff): def sanitize_input__attr_diff(attr_diff): pass # TODO: impl -def sanitize_input__rzdoc_name(rzdoc_name): +def sanitize_input__rzdoc_name(rzdoc_name_raw): """ sanitize rzdoc name raw input """ + rzdoc_name = rzdoc_name_raw.strip() # make sure we ommit trailing white spaces from doc name + if None == rzdoc_name or 0 == len(rzdoc_name): raise API_Exception__bad_request('rzdoc: open request: empty doc name') @@ -62,7 +64,6 @@ def sanitize_input__rzdoc_name(rzdoc_name): raise API_Exception__bad_request('rzdoc: open request: doc name exceeds max doc name limit: %s' % (rzdoc_name)) # FIXME: fail on HTML escape codes, UTF handling, etc - rzdoc_name = rzdoc_name.strip() # make sure we ommit trailing white spaces from doc name return rzdoc_name -- cgit v1.3.1