darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2025-12-24 01:11:38 -05:00
Code Issues Packages Projects Releases Wiki Activity

Don’t allow broadcasts to be created from JSON

Browse Source 
Until we know we’re going to have real users for this, let’s not expose
it.
This commit is contained in:
Chris Hill-Scott
2021-01-26 12:00:19 +00:00
parent c9d55039eb
commit b85fcafd46
2 changed files with 19 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
app/v2/broadcast/post_broadcast.py
View File

@@ -21,22 +21,22 @@ def create_broadcast():
authenticated_service.permissions,
)
if request.content_type == 'application/json':
broadcast_json = request.get_json()
elif request.content_type == 'application/cap+xml':
cap_xml = request.get_data(as_text=True)
if not validate_xml(cap_xml, 'CAP-v1.2.xsd'):
raise BadRequestError(
message=f'Request data is not valid CAP XML',
status_code=400,
)
broadcast_json = cap_xml_to_dict(cap_xml)
else:
if request.content_type != 'application/cap+xml':
raise BadRequestError(
message=f'Content type {request.content_type} not supported',
status_code=400,
)
cap_xml = request.get_data(as_text=True)
if not validate_xml(cap_xml, 'CAP-v1.2.xsd'):
raise BadRequestError(
message=f'Request data is not valid CAP XML',
status_code=400,
)
broadcast_json = cap_xml_to_dict(cap_xml)
validate(broadcast_json, post_broadcast_schema)
polygons = Polygons(list(chain.from_iterable((