Quellcode durchsuchen

Fix url regexp.

\d allows numbers from other digit systems, so urls like: http://demo.getpinry.com/१७/ are possible. This could lead to some nasty security issues in the future (ie. if you try to use pin number without using `int(...)`).
pull/62/head
Tomasz Wysocki vor 10 Jahren
Ursprung
Commit
bd984f9fd2
1 geänderte Dateien mit 1 neuen und 1 gelöschten Zeilen
  1. +1
    -1
      pinry/core/urls.py

+ 1
- 1
pinry/core/urls.py Datei anzeigen

@@ -30,7 +30,7 @@ urlpatterns = patterns('',
name='tag-pins'),
url(r'^pins/user/(?P<user>(\w|-)+)/$', TemplateView.as_view(template_name='core/pins.html'),
name='user-pins'),
url(r'^(?P<pin>\d+)/$', TemplateView.as_view(template_name='core/pins.html'),
url(r'^(?P<pin>[0-9]+)/$', TemplateView.as_view(template_name='core/pins.html'),
name='recent-pins'),
url(r'^$', TemplateView.as_view(template_name='core/pins.html'),
name='recent-pins'),


Laden…
Abbrechen
Speichern