Skip to content
This repository has been archived by the owner on Aug 29, 2023. It is now read-only.

Uploads of multiple files are not validated correctly #11

Open
berz opened this issue Jun 7, 2013 · 0 comments
Open

Uploads of multiple files are not validated correctly #11

berz opened this issue Jun 7, 2013 · 0 comments
Labels

Comments

@berz
Copy link
Contributor

berz commented Jun 7, 2013

Seems only the first file's extension is checked. If a file with a non-whitelisted attachment follows it will raise a werkzeug error:

File "/home/voidwarranties/voidwarranties/MALMan/MALMan/views_accounting.py", line 190, in accounting_add_transaction

upload_attachments(request, attachments, transaction, DB)

File "/home/voidwarranties/voidwarranties/MALMan/MALMan/view_utils.py", line 135, in upload_attachments

name = str(accounting_attachment.id) + '.')

File "/home/voidwarranties/voidwarranties/MALMan/env/lib/python2.7/site-packages/flaskext/uploads.py", line 388, in save

raise UploadNotAllowed()
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

1 participant