From 73d781cf6bc0fcf215cd9456dab3c6a4b495da52 Mon Sep 17 00:00:00 2001 From: Son Date: Mon, 10 Jan 2022 10:44:41 +0100 Subject: [PATCH] handle non number alias_id --- app/dashboard/views/index.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/app/dashboard/views/index.py b/app/dashboard/views/index.py index 310d7ee0..f74a7932 100644 --- a/app/dashboard/views/index.py +++ b/app/dashboard/views/index.py @@ -112,7 +112,12 @@ def index(): flash("You need to upgrade your plan to create new alias.", "warning") elif request.form.get("form-name") in ("delete-alias", "disable-alias"): - alias_id = request.form.get("alias-id") + try: + alias_id = int(request.form.get("alias-id")) + except ValueError: + flash("unknown error", "error") + return redirect(request.url) + alias: Alias = Alias.get(alias_id) if not alias or alias.user_id != current_user.id: flash("Unknown error, sorry for the inconvenience", "error")