From 79ae09bd46c79c3120cd081253571ec4ce1ef860 Mon Sep 17 00:00:00 2001
From: Brian Moe <brian.moe@ligo.org>
Date: Wed, 16 Jan 2013 10:20:06 -0600
Subject: [PATCH] Disallow malformed graceids in URLs.
---
gracedb/urls.py | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/gracedb/urls.py b/gracedb/urls.py
index 411332192..a5839868c 100644
--- a/gracedb/urls.py
+++ b/gracedb/urls.py
@@ -9,12 +9,12 @@ urlpatterns = patterns('gracedb.views',
url (r'^$', 'index', name="home"),
url (r'^create/$', 'create', name="create"),
url (r'^search/(?P<format>(json|flex))?$', 'search', name="search"),
- url (r'^view/(?P<graceid>[\w\d]+)', 'view', name="view"),
- url (r'^voevent/(?P<graceid>[\w\d]+)', 'voevent', name="voevent"),
- url (r'^skyalert/(?P<graceid>[\w\d]+)', 'skyalert', name="skyalert"),
- url (r'^(?P<graceid>[\w\d]+)$', 'view', name="view2"),
- url (r'^(?P<graceid>[\w\d]+)/files/(?P<filename>.*)$', download, name="file"),
- url (r'^(?P<graceid>[\w\d]+)/log/(?P<num>([\d]*|preview))$', 'logentry', name="logentry"),
+ url (r'^view/(?P<graceid>[GEHT]\d+)', 'view', name="view"),
+ url (r'^voevent/(?P<graceid>[GEHT]\d+)', 'voevent', name="voevent"),
+ url (r'^skyalert/(?P<graceid>[GEHT]\d+)', 'skyalert', name="skyalert"),
+ url (r'^(?P<graceid>[GEHT]\d+)$', 'view', name="view2"),
+ url (r'^(?P<graceid>[GEHT]\d+)/files/(?P<filename>.*)$', download, name="file"),
+ url (r'^(?P<graceid>[GEHT]\d+)/log/(?P<num>([\d]*|preview))$', 'logentry', name="logentry"),
# (r'^view/(?P<uid>[\w\d]+)', 'view'),
--
GitLab