Merge pull request #380 from JakubOnderka/patch-1

csvimport: Return error if input is not valid UTF-8
2020-03-18 10:11:26 +01:00 · 2020-03-18 10:11:26 +01:00 · b869c416d8
parent 0e84ea7ad3 fe34023866
commit b869c416d8
1 changed files with 5 additions and 1 deletions
--- a/misp_modules/modules/import_mod/csvimport.py
+++ b/misp_modules/modules/import_mod/csvimport.py
@ -256,7 +256,11 @@ def handler(q=False):
        return False
    request = json.loads(q)
    if request.get('data'):
+        try:
          data = base64.b64decode(request['data']).decode('utf-8')
+        except UnicodeDecodeError:
+          misperrors['error'] = "Input is not valid UTF-8"
+          return misperrors
    else:
        misperrors['error'] = "Unsupported attributes type"
        return misperrors