diff options
author | Cédric Bonhomme <cedric@cedricbonhomme.org> | 2023-05-23 07:51:37 +0200 |
---|---|---|
committer | Cédric Bonhomme <cedric@cedricbonhomme.org> | 2023-05-23 07:51:37 +0200 |
commit | b58b168bc497845991c35cd3df34116a6707e94f (patch) | |
tree | e486b16761ab8d76c04f68f37951d6a3226369cb /newspipe/web/views/feed.py | |
parent | chg: [documentation] Updated README. (diff) | |
download | newspipe-b58b168bc497845991c35cd3df34116a6707e94f.tar.gz newspipe-b58b168bc497845991c35cd3df34116a6707e94f.tar.bz2 newspipe-b58b168bc497845991c35cd3df34116a6707e94f.zip |
chg: [security] fix CVE-2023-32681 (GHSA-j8r2-6x86-q33q).
Diffstat (limited to 'newspipe/web/views/feed.py')
-rw-r--r-- | newspipe/web/views/feed.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/newspipe/web/views/feed.py b/newspipe/web/views/feed.py index d14a87c5..16059319 100644 --- a/newspipe/web/views/feed.py +++ b/newspipe/web/views/feed.py @@ -234,6 +234,7 @@ def form(feed_id=None): @feed_bp.route("/edit/<int:feed_id>", methods=["POST"]) @login_required def process_form(feed_id=None): + form = AddFeedForm() feed_contr = FeedController(current_user.id) form.set_category_choices(CategoryController(current_user.id).read()) @@ -267,7 +268,6 @@ def process_form(feed_id=None): if feed_id is not None: # Edit an existing feed - print(feed_attr["category_id"]) feed_contr.update({"id": feed_id}, feed_attr) flash( gettext( @@ -276,6 +276,7 @@ def process_form(feed_id=None): ), "success", ) + return redirect(url_for("feed.form", feed_id=feed_id)) # Create a new feed |