growing security
This commit is contained in:
parent
45950997f8
commit
e63b2a50ec
|
@ -181,7 +181,6 @@ class ActionView(View):
|
||||||
def post(self):
|
def post(self):
|
||||||
"""Posts an action."""
|
"""Posts an action."""
|
||||||
|
|
||||||
# import pdb; pdb.set_trace()
|
|
||||||
json = request.get_json(validate=False)
|
json = request.get_json(validate=False)
|
||||||
|
|
||||||
if not json or 'type' not in json:
|
if not json or 'type' not in json:
|
||||||
|
@ -190,6 +189,10 @@ class ActionView(View):
|
||||||
# defs
|
# defs
|
||||||
resource_def = app.resources[json['type']]
|
resource_def = app.resources[json['type']]
|
||||||
if json['type'] == Snapshot.t:
|
if json['type'] == Snapshot.t:
|
||||||
|
if json.get('software') == 'Web' and json['device'] == 'Computer':
|
||||||
|
txt = 'Invalid snapshot'
|
||||||
|
raise ValidationError(txt)
|
||||||
|
|
||||||
if json.get('software') == 'Web':
|
if json.get('software') == 'Web':
|
||||||
snapshot = SnapshotView(json, resource_def, self.schema)
|
snapshot = SnapshotView(json, resource_def, self.schema)
|
||||||
return snapshot.post()
|
return snapshot.post()
|
||||||
|
|
Reference in a new issue