paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-03 21:43:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Validate subscriptions in add_subscriptions_backend.

Browse Source 
(imported from commit 3d4b669ade135dfa85c01238db110a5e4c1362b2)
This commit is contained in:
Steve Howell
2013-12-17 16:24:25 -05:00
parent 48319f9763
commit f7ec8cccc7
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
zerver/views/__init__.py
View File

@@ -1652,7 +1652,8 @@ def stream_link(stream_name):
@has_request_variables
def add_subscriptions_backend(request, user_profile,
streams_raw = REQ("subscriptions", json_to_list),
streams_raw = REQ("subscriptions",
validator=check_list(check_dict([['name', check_string]]))),
invite_only = REQ(converter=json_to_bool, default=False),
announce = REQ(converter=json_to_bool, default=False),
principals = REQ(validator=check_list(check_string), default=None),
@@ -1660,8 +1661,6 @@ def add_subscriptions_backend(request, user_profile,
stream_names = []
for stream in streams_raw:
if not isinstance(stream, dict):
return json_error("Malformed request")
stream_name = stream["name"].strip()
if len(stream_name) > Stream.MAX_NAME_LENGTH:
return json_error("Stream name (%s) too long." % (stream_name,))