csvimport: Return error if input is not valid UTF-8

2020-03-12 11:02:43 +01:00 · 2020-03-12 11:02:43 +01:00 · fe34023866
parent 0e84ea7ad3
commit fe34023866
1 changed files with 5 additions and 1 deletions
--- a/misp_modules/modules/import_mod/csvimport.py
+++ b/misp_modules/modules/import_mod/csvimport.py
@ -256,7 +256,11 @@ def handler(q=False):
        return False
    request = json.loads(q)
    if request.get('data'):
-        data = base64.b64decode(request['data']).decode('utf-8')
+        try:
+          data = base64.b64decode(request['data']).decode('utf-8')
+        except UnicodeDecodeError:
+          misperrors['error'] = "Input is not valid UTF-8"
+          return misperrors
    else:
        misperrors['error'] = "Unsupported attributes type"
        return misperrors