From fe34023866da011b175709a862d6efec579b56b3 Mon Sep 17 00:00:00 2001
From: Jakub Onderka <ahoj@jakubonderka.cz>
Date: Thu, 12 Mar 2020 11:02:43 +0100
Subject: [PATCH] csvimport: Return error if input is not valid UTF-8

---
 misp_modules/modules/import_mod/csvimport.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/misp_modules/modules/import_mod/csvimport.py b/misp_modules/modules/import_mod/csvimport.py
index 8bfbbe9..38e5f96 100644
--- a/misp_modules/modules/import_mod/csvimport.py
+++ b/misp_modules/modules/import_mod/csvimport.py
@@ -256,7 +256,11 @@ def handler(q=False):
         return False
     request = json.loads(q)
     if request.get('data'):
-        data = base64.b64decode(request['data']).decode('utf-8')
+        try:
+          data = base64.b64decode(request['data']).decode('utf-8')
+        except UnicodeDecodeError:
+          misperrors['error'] = "Input is not valid UTF-8"
+          return misperrors
     else:
         misperrors['error'] = "Unsupported attributes type"
         return misperrors