self-hosted/Mailu
1
0
Fork 0
mirror of https://github.com/Mailu/Mailu.git synced 2025-05-21 22:33:16 +02:00
Code Issues Releases Activity

Add input validation for domain creation

Browse Source
This commit is contained in:
Kevin Falcoz 2022-02-01 13:08:30 +01:00 committed by GitHub
parent 1e54d44b19
commit 3fe1dbe881
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
core/admin/mailu/ui/views/domains.py
View File

@ -18,18 +18,21 @@ def domain_list():
def domain_create(): def domain_create():
form = forms.DomainForm() form = forms.DomainForm()
if form.validate_on_submit(): if form.validate_on_submit():
conflicting_domain = models.Domain.query.get(form.name.data) if validators.domain(form.name.data) is True:
conflicting_alternative = models.Alternative.query.get(form.name.data) conflicting_domain = models.Domain.query.get(form.name.data)
conflicting_relay = models.Relay.query.get(form.name.data) conflicting_alternative = models.Alternative.query.get(form.name.data)
if conflicting_domain or conflicting_alternative or conflicting_relay: conflicting_relay = models.Relay.query.get(form.name.data)
flask.flash('Domain %s is already used' % form.name.data, 'error') if conflicting_domain or conflicting_alternative or conflicting_relay:
flask.flash('Domain %s is already used' % form.name.data, 'error')
else:
domain = models.Domain()
form.populate_obj(domain)
models.db.session.add(domain)
models.db.session.commit()
flask.flash('Domain %s created' % domain)
else: else:
domain = models.Domain() flask.flash('Domain %s is invalid' % form.name.data, 'error')
form.populate_obj(domain) return flask.redirect(flask.url_for('.domain_list'))
models.db.session.add(domain)
models.db.session.commit()
flask.flash('Domain %s created' % domain)
return flask.redirect(flask.url_for('.domain_list'))
return flask.render_template('domain/create.html', form=form) return flask.render_template('domain/create.html', form=form)