From 66f0aa8f71738e8994011b3ea0fee9c38357c73d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20P=C3=A9ters?= <fpeters@entrouvert.com>
Date: Mon, 23 Mar 2020 14:58:23 +0100
Subject: [PATCH] return error 400 on invalid /payment/init calls (#40888)

---
 auquotidien/modules/payments.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/auquotidien/modules/payments.py b/auquotidien/modules/payments.py
index 22ec7c3..7e0aa04 100644
--- a/auquotidien/modules/payments.py
+++ b/auquotidien/modules/payments.py
@@ -567,8 +567,9 @@ class PublicPaymentDirectory(Directory):
     back = PublicPaymentRegieBackDirectory(False)
     back_asynchronous = PublicPaymentRegieBackDirectory(True)
 
-
     def init(self):
+        if 'invoice_ids' not in get_request().form:
+            raise errors.QueryError()
         invoice_ids = get_request().form.get('invoice_ids').split(' ')
 
         for invoice_id in invoice_ids: