entrouvert/wcs
entrouvert
/
wcs
14
1
Fork 0
Code Issues Pull Requests 34 Releases Activity

misc: check category_id from query string is an integer (#46770)

This commit is contained in:
Frédéric Péters 2020-09-22 15:06:57 +02:00
parent eff8a6cb48
commit 784670ed10
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
tests/test_api.py
View File

@ -2402,6 +2402,7 @@ def test_api_global_listing(pub, local_user):
# check error handling
get_app(pub).get(sign_uri('/api/forms/?status=done&limit=plop', user=local_user), status=400)
get_app(pub).get(sign_uri('/api/forms/?status=done&offset=plop', user=local_user), status=400)
get_app(pub).get(sign_uri('/api/forms/?category_id=plop', user=local_user), status=400)
# check when there are missing statuses
for formdata in data_class.select():

4
wcs/backoffice/management.py
View File

@ -832,8 +832,8 @@ class ManagementDirectory(Directory):
criterias.append(Equal('submission_channel',
get_request().form.get('submission_channel')))
if get_request().form.get('category_id'):
criterias.append(Equal('category_id',
get_request().form.get('category_id')))
category_id = misc.get_int_or_400(get_request().form.get('category_id'))
criterias.append(Equal('category_id', category_id))
if get_request().form.get('q'):
criterias.append(FtsMatch(get_request().form.get('q')))
return criterias