[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-commits
Subject:    [websites/quality-kde-org] sanitizer: sanitizer/check.py - do not allow urls that don't start with h
From:       Allen Winter <null () kde ! org>
Date:       2017-08-17 16:08:22
Message-ID: E1diNLK-0008PC-NL () code ! kde ! org
[Download RAW message or body]

Git commit c33ff592d53eec8bbe236c3da1e017f5091a7b43 by Allen Winter.
Committed on 17/08/2017 at 16:07.
Pushed by winterz into branch 'master'.

sanitizer/check.py - do not allow urls that don't start with http[s]
patch by [ade]

M  +4    -0    sanitizer/check.py

https://commits.kde.org/websites/quality-kde-org/c33ff592d53eec8bbe236c3da1e017f5091a7b43

diff --git a/sanitizer/check.py b/sanitizer/check.py
index 836853c..01afc2a 100755
--- a/sanitizer/check.py
+++ b/sanitizer/check.py
@@ -103,6 +103,10 @@ def handleInput():
         if (form.has_key("uri")):
                 import urllib, os
                 uri = form["uri"].value
+                if not(uri.startswith("http:") or uri.startswith("https:")):
+                        showError( "URI <b>%s</b> is invalid." % uri )
+                        return None
+
                 try:
                         urllib._urlopener = ThrowingURLOpener()
                         (filename, headers) = urllib.urlretrieve(uri)
[prev in list] [next in list] [prev in thread] [next in thread]