From b764bb427be85f86994bd86c27ff599e0e1b72ca Mon Sep 17 00:00:00 2001 From: Steve Howell Date: Tue, 17 Dec 2013 14:09:05 -0500 Subject: [PATCH] Validate invitee_emails better in json_bulk_invite_users(). (imported from commit a446a361677bcb0501d9a340f7b5bb3614c7481b) --- zerver/views/__init__.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/zerver/views/__init__.py b/zerver/views/__init__.py index d527b4af64..3e47a7d431 100644 --- a/zerver/views/__init__.py +++ b/zerver/views/__init__.py @@ -610,7 +610,8 @@ def login_page(request, **kwargs): @authenticated_json_post_view @has_request_variables -def json_bulk_invite_users(request, user_profile, invitee_emails=REQ(converter=json_to_list)): +def json_bulk_invite_users(request, user_profile, + invitee_emails=REQ(validator=check_list(check_string))): invitee_emails = set(invitee_emails) streams = get_default_subs(user_profile)