yannic/stacosys
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix flask parameter retrieval

Browse source
This commit is contained in:
Yax 2021-01-19 19:00:57 +01:00
parent 93a4971d79
commit 3d818ad417
2 changed files with 3 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
stacosys/interface/api.py
View file

@ -4,7 +4,6 @@
import logging import logging
from flask import abort, jsonify, request from flask import abort, jsonify, request
from stacosys.conf.config import ConfigParameter
from stacosys.interface import app from stacosys.interface import app
from stacosys.model.comment import Comment from stacosys.model.comment import Comment
@ -22,7 +21,7 @@ def query_comments():
comments = [] comments = []
try: try:
token = request.args.get("token", "") token = request.args.get("token", "")
if token != app.config.get(ConfigParameter.SITE_TOKEN): if token != app.config.get("SITE_TOKEN"):
abort(401) abort(401)
url = request.args.get("url", "") url = request.args.get("url", "")
@ -56,7 +55,7 @@ def query_comments():
def get_comments_count(): def get_comments_count():
try: try:
token = request.args.get("token", "") token = request.args.get("token", "")
if token != app.config.get(ConfigParameter.SITE_TOKEN): if token != app.config.get("SITE_TOKEN"):
abort(401) abort(401)
url = request.args.get("url", "") url = request.args.get("url", "")

3
stacosys/interface/form.py
View file

@ -5,7 +5,6 @@ import logging
from datetime import datetime from datetime import datetime
from flask import abort, redirect, request from flask import abort, redirect, request
from stacosys.conf.config import ConfigParameter
from stacosys.interface import app from stacosys.interface import app
from stacosys.model.comment import Comment from stacosys.model.comment import Comment
@ -21,7 +20,7 @@ def new_form_comment():
# validate token: retrieve site entity # validate token: retrieve site entity
token = data.get("token", "") token = data.get("token", "")
if token != app.config.get(ConfigParameter.SITE_TOKEN): if token != app.config.get("SITE_TOKEN"):
abort(401) abort(401)
# honeypot for spammers # honeypot for spammers