return error 400 on invalid /payment/init calls (#40888)

2020-03-23 14:58:23 +01:00 · 2020-03-23 14:58:23 +01:00 · 66f0aa8f71
parent 7012ca290f
commit 66f0aa8f71
1 changed files with 2 additions and 1 deletions
--- a/auquotidien/modules/payments.py
+++ b/auquotidien/modules/payments.py
@ -567,8 +567,9 @@ class PublicPaymentDirectory(Directory):
    back = PublicPaymentRegieBackDirectory(False)
    back_asynchronous = PublicPaymentRegieBackDirectory(True)

-
    def init(self):
+        if 'invoice_ids' not in get_request().form:
+            raise errors.QueryError()
        invoice_ids = get_request().form.get('invoice_ids').split(' ')

        for invoice_id in invoice_ids: