From: Christian Heller Date: Thu, 26 Jan 2017 01:01:03 +0000 (+0100) Subject: Use bottle's alternate direct property access to get unicode POSTs. X-Git-Url: https://plomlompom.com/repos/%27%29;%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20chunks.push%28escapeHTML%28span%5B2%5D%29%29;%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20chunks.push%28%27?a=commitdiff_plain;h=c497ba2911326f5138ffcbefd85735bc49460059;p=url-catcher Use bottle's alternate direct property access to get unicode POSTs. --- diff --git a/url_catcher.py b/url_catcher.py index 0121896..5f5b030 100755 --- a/url_catcher.py +++ b/url_catcher.py @@ -116,7 +116,7 @@ def post_link(): str(start_date) + '\n' + str(attempts), 'w') # Derive page / page file name. - page = bottle.request.forms.get('page') + page = bottle.request.forms.page if '\0' in page or '/' in page or '.' in page or len(page.encode()) > 255: return bottle.HTTPResponse(messages['badPageName'], 400) @@ -124,12 +124,12 @@ def post_link(): captcha_file = open(captchas_dir + '/' + page, 'r') captcha_correct = captcha_file.readline().rstrip() captcha_file.close() - captcha_input = bottle.request.forms.get('captcha') + captcha_input = bottle.request.forms.captcha if captcha_correct != captcha_input: return bottle.HTTPResponse(messages['wrongCaptcha'], 400) # Record URL. - url = bottle.request.forms.get('url') + url = bottle.request.forms.url if not validators.url(url): return bottle.HTTPResponse(messages['invalidURL'], 400) send_mail(page, url)