yax/stacosys
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix flask parameter retrieval

Browse Source
This commit is contained in:
Yax 2021-01-19 19:00:57 +01:00
parent 599838af1f
commit 3382a0a3f4
2 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
stacosys/interface/api.py
View File

@ -4,7 +4,6 @@
import logging
from flask import abort, jsonify, request
from stacosys.conf.config import ConfigParameter
from stacosys.interface import app
from stacosys.model.comment import Comment
@ -22,7 +21,7 @@ def query_comments():
comments = []
try:
token = request.args.get("token", "")
if token != app.config.get(ConfigParameter.SITE_TOKEN):
if token != app.config.get("SITE_TOKEN"):
abort(401)
url = request.args.get("url", "")
@ -56,7 +55,7 @@ def query_comments():
def get_comments_count():
try:
token = request.args.get("token", "")
if token != app.config.get(ConfigParameter.SITE_TOKEN):
if token != app.config.get("SITE_TOKEN"):
abort(401)
url = request.args.get("url", "")

3
stacosys/interface/form.py
View File

@ -5,7 +5,6 @@ import logging
from datetime import datetime
from flask import abort, redirect, request
from stacosys.conf.config import ConfigParameter
from stacosys.interface import app
from stacosys.model.comment import Comment
@ -21,7 +20,7 @@ def new_form_comment():
# validate token: retrieve site entity
token = data.get("token", "")
if token != app.config.get(ConfigParameter.SITE_TOKEN):
if token != app.config.get("SITE_TOKEN"):
abort(401)
# honeypot for spammers