theluyuan/shynet
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add uuid validation

Browse Source
This commit is contained in:
Paweł Jastrzębski 2022-01-05 09:47:14 +01:00
parent 2aaadfe81c
commit ba91ed561d
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
shynet/api/views.py
View File

@ -1,3 +1,4 @@
import uuid
from django.http import JsonResponse from django.http import JsonResponse
from django.db.models import Q from django.db.models import Q
from django.db.models.query import QuerySet from django.db.models.query import QuerySet
@ -9,6 +10,14 @@ from core.models import Service
from .mixins import ApiTokenRequiredMixin from .mixins import ApiTokenRequiredMixin
def is_valid_uuid(value):
try:
uuid.UUID(value)
return True
except ValueError:
return False
class DashboardApiView(ApiTokenRequiredMixin, DateRangeMixin, View): class DashboardApiView(ApiTokenRequiredMixin, DateRangeMixin, View):
def get(self, request, *args, **kwargs): def get(self, request, *args, **kwargs):
services = Service.objects.filter( services = Service.objects.filter(
@ -16,7 +25,7 @@ class DashboardApiView(ApiTokenRequiredMixin, DateRangeMixin, View):
).distinct() ).distinct()
uuid = request.GET.get('uuid') uuid = request.GET.get('uuid')
if uuid: if uuid and is_valid_uuid(uuid):
services = services.filter(uuid=uuid) services = services.filter(uuid=uuid)
basic = request.GET.get('basic', '0').lower() in ('1', 'true') basic = request.GET.get('basic', '0').lower() in ('1', 'true')