Closed
Bug 1682122
Opened 5 years ago
Closed 5 years ago
Protect numeric GET parameters against ValueErrors
Categories
(Webtools Graveyard :: Pontoon, defect, P3)
Webtools Graveyard
Pontoon
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: mathjazz, Assigned: mathjazz)
Details
Attachments
(1 file)
Passing GET parameters of wrong type can sometimes result in server errors. That happens particularly often when crawlers or attackers make requests to the views which take integers as inputs (e.g. IDs), causing ValueErrors.
Some of our views have protection against that, but many don't. Let's fix that by validating GET parameters that need to be integers.
|
||
Comment 1•5 years ago
|
||
|
Assignee | |
Updated•5 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
|
||
Updated•4 years ago
|
Product: Webtools → Webtools Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•