yuuki/taiko-web
1
0
Fork 0
mirror of https://github.com/yuukiwww/taiko-web.git synced 2024-06-30 08:19:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #224 from N-Field/patch-preview-int

Browse Source 
fix 400 errors from /api/preview
This commit is contained in:
Bui 2020-05-09 17:29:53 +01:00 committed by GitHub
commit 224bf25fc0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app.py
View File

@ -341,9 +341,10 @@ def route_admin_songs_id_delete(id):
@app.cache.cached(timeout=15, query_string=True)
def route_api_preview():
song_id = request.args.get('id', None)
if not song_id or not re.match('^[0-9]+$', song_id):
if not song_id or not re.match('^[0-9]{1,9}$', song_id):
abort(400)
song_id = int(song_id)
song = db.songs.find_one({'id': song_id})
if not song:
abort(400)