Git-Mirrors/mat2-web
1
0
Fork 0
mirror of https://0xacab.org/jvoisin/mat2-web.git synced 2025-05-12 19:22:21 -04:00
Code Issues Projects Releases Packages Wiki Activity

Resolve "Fuzzing Errors /api/upload"

Browse source
This commit is contained in:
jfriedli 2020-05-08 09:10:18 -07:00
parent 9157dee69f
commit 853ace7d83
5 changed files with 46 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
matweb/rest_api.py
View file

@ -28,11 +28,15 @@ class APIUpload(Resource):
args = req_parser.parse_args()
try:
file_data = base64.b64decode(args['file'])
except binascii.Error as err:
abort(400, message='Failed decoding file: ' + str(err))
except (binascii.Error, ValueError):
abort(400, message='Failed decoding file')
file = FileStorage(stream=io.BytesIO(file_data), filename=args['file_name'])
filename, filepath = utils.save_file(file, self.upload_folder)
try:
filename, filepath = utils.save_file(file, self.upload_folder)
except ValueError:
abort(400, message='Invalid Filename')
parser, mime = utils.get_file_parser(filepath)
if parser is None: