LobotomyLabs/classquiz-ai
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🔒 Escaping server-url

Browse Source
This commit is contained in:
Mawoka
2022-04-26 17:15:59 +02:00
parent 36814a5c3e
commit 9ca4f448d8
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
classquiz/routers/quiz.py
+2 -2
View File
@@ -23,7 +23,7 @@ router = APIRouter()
@router.post("/create") @router.post("/create")
async def create_quiz_lol(quiz_input: QuizInput, user: User = Depends(get_current_user)): async def create_quiz_lol(quiz_input: QuizInput, user: User = Depends(get_current_user)):
imgur_regex = r"^https://i\.imgur\.com\/.{7}.(jpg|png|gif)$" imgur_regex = r"^https://i\.imgur\.com\/.{7}.(jpg|png|gif)$"
server_regex = rf"^{settings.root_address}/api/v1/storage/download/.{36}--.{36}$" server_regex = rf"^{re.escape(settings.root_address)}/api/v1/storage/download/.{36}--.{36}$"
quiz_input.title = html.unescape(bleach.clean(quiz_input.title, tags=[], strip=True)) quiz_input.title = html.unescape(bleach.clean(quiz_input.title, tags=[], strip=True))
quiz_input.description = html.unescape(bleach.clean(quiz_input.description, tags=[], strip=True)) quiz_input.description = html.unescape(bleach.clean(quiz_input.description, tags=[], strip=True))
for question in quiz_input.questions: for question in quiz_input.questions:
@@ -116,7 +116,7 @@ async def get_quiz_list(user: User = Depends(get_current_user)):
@router.put("/update/{quiz_id}") @router.put("/update/{quiz_id}")
async def update_quiz(quiz_id: str, quiz_input: QuizInput, user: User = Depends(get_current_user)): async def update_quiz(quiz_id: str, quiz_input: QuizInput, user: User = Depends(get_current_user)):
imgur_regex = r"^https://i\.imgur\.com\/.{7}.(jpg|png|gif)$" imgur_regex = r"^https://i\.imgur\.com\/.{7}.(jpg|png|gif)$"
server_regex = rf"^{settings.root_address}/api/v1/storage/download/.{{36}}--.{{36}}$" server_regex = rf"^{re.escape(settings.root_address)}/api/v1/storage/download/.{{36}}--.{{36}}$"
for question in quiz_input.questions: for question in quiz_input.questions:
if question.image == "": if question.image == "":
question.image = None question.image = None
run_tests.sh
+1 -1
View File
@@ -9,7 +9,6 @@ stop() {
init() { init() {
mkdir /tmp/storage mkdir /tmp/storage
rm classquiz.db
docker run --rm -d -p 6379:6379 --name test_redis redis:alpine docker run --rm -d -p 6379:6379 --name test_redis redis:alpine
docker run -it --rm -d -p 7700:7700 --name test_meili getmeili/meilisearch:latest docker run -it --rm -d -p 7700:7700 --name test_meili getmeili/meilisearch:latest
pipenv run python3 init_db.py pipenv run python3 init_db.py
@@ -19,6 +18,7 @@ case $1 in
+) init ;; +) init ;;
-) stop ;; -) stop ;;
a) a)
rm classquiz.db
init init
run_tests run_tests
stop stop