# HG changeset patch # User Goffi # Date 1493248554 -7200 # Node ID 1375b96f4309c6dcadd124fe8babd58dc8e8590e # Parent 9be057e23ce6df31455cb51146d51aff55a70ea1 pages (common/blog): check posted data type for comments diff -r 9be057e23ce6 -r 1375b96f4309 src/pages/common/blog/page_meta.py --- a/src/pages/common/blog/page_meta.py Thu Apr 27 01:15:24 2017 +0200 +++ b/src/pages/common/blog/page_meta.py Thu Apr 27 01:15:54 2017 +0200 @@ -103,14 +103,19 @@ profile = self.getProfile(request) if profile is None: self.pageError(request, C.HTTP_UNAUTHORIZED) - service, node, body = self.getPostedData(request, (u'service', u'node', u'body')) - if not body: - self.pageError(request, C.HTTP_BAD_REQUEST) - comment_data = {u"content": body} - try: - yield self.host.bridge.mbSend(service, node, comment_data, profile) - except Exception as e: - if u"forbidden" in unicode(e): - self.pageError(request, 401) - else: - raise e + type_ = self.getPostedData(request, u'type') + if type_ == u'comment': + service, node, body = self.getPostedData(request, (u'service', u'node', u'body')) + + if not body: + self.pageError(request, C.HTTP_BAD_REQUEST) + comment_data = {u"content": body} + try: + yield self.host.bridge.mbSend(service, node, comment_data, profile) + except Exception as e: + if u"forbidden" in unicode(e): + self.pageError(request, 401) + else: + raise e + else: + log.warning(_(u"Unhandled data type: {}").format(type_))