← Back to branch summary

~azzar1/unity/add-show-desktop-key

« back to all changes in this revision

Viewing changes to ivle/webapp/submit/__init__.py

  • Committer: Matt Giuca
  • Date: 2010-02-23 04:16:34 UTC
  • Revision ID: matt.giuca@gmail.com-20100223041634-lhi0fg68iwe4ov1d
https://launchpad.net/bugs/522462
ivle.database: Added a security check on Project.submit() that the path meets certain constraints, to avoid path injection. Fixes LP bug #522462.

Show diffs side-by-side

added added

removed removed

Lines of Context:
ivle/webapp/submit/__init__.py
98
98
            try:
99
99
                ctx['submission'] = project.submit(self.context,
100
100
                                    unicode(self.path), revision, req.user)
101
 
            except database.DeadlinePassed, e:
 
101
            except (database.DeadlinePassed, database.SubmissionError), e:
102
102
                raise BadRequest(str(e) + ".")
103
103
 
104
104
            # The Subversion configuration needs to be updated, to grant