aboutsummaryrefslogtreecommitdiff
path: root/newspipe/web/views/feed.py
diff options
context:
space:
mode:
authorCédric Bonhomme <cedric@cedricbonhomme.org>2023-05-23 07:51:37 +0200
committerCédric Bonhomme <cedric@cedricbonhomme.org>2023-05-23 07:51:37 +0200
commitb58b168bc497845991c35cd3df34116a6707e94f (patch)
treee486b16761ab8d76c04f68f37951d6a3226369cb /newspipe/web/views/feed.py
parentchg: [documentation] Updated README. (diff)
downloadnewspipe-b58b168bc497845991c35cd3df34116a6707e94f.tar.gz
newspipe-b58b168bc497845991c35cd3df34116a6707e94f.tar.bz2
newspipe-b58b168bc497845991c35cd3df34116a6707e94f.zip
chg: [security] fix CVE-2023-32681 (GHSA-j8r2-6x86-q33q).
Diffstat (limited to 'newspipe/web/views/feed.py')
-rw-r--r--newspipe/web/views/feed.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/newspipe/web/views/feed.py b/newspipe/web/views/feed.py
index d14a87c5..16059319 100644
--- a/newspipe/web/views/feed.py
+++ b/newspipe/web/views/feed.py
@@ -234,6 +234,7 @@ def form(feed_id=None):
@feed_bp.route("/edit/<int:feed_id>", methods=["POST"])
@login_required
def process_form(feed_id=None):
+
form = AddFeedForm()
feed_contr = FeedController(current_user.id)
form.set_category_choices(CategoryController(current_user.id).read())
@@ -267,7 +268,6 @@ def process_form(feed_id=None):
if feed_id is not None:
# Edit an existing feed
- print(feed_attr["category_id"])
feed_contr.update({"id": feed_id}, feed_attr)
flash(
gettext(
@@ -276,6 +276,7 @@ def process_form(feed_id=None):
),
"success",
)
+
return redirect(url_for("feed.form", feed_id=feed_id))
# Create a new feed
bgstack15