django / django-contrib-comments

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Insufficient `content-type` validation in `post_comment`

minusf opened this issue · comments

Non-existing models are not handled.
From a recent security scan against our site:

Exception Type: LookupError at /c/post/
Exception Value: App 'wagtailcore' doesn't have a 'page' AND 1='1/*' model.

apps.get_model returns LookupError for non-existing models. This is not handled in the code.

ah this was actually fixed in 4da9d1f.
sorry for the noise!