return 404

2016-03-19 20:28:25 +01:00 · 2016-03-19 20:28:25 +01:00 · 652df88342
parent 1bff4aa0e9
commit 652df88342
1 changed files with 2 additions and 0 deletions
--- a/pandora/item/views.py
+++ b/pandora/item/views.py
@ -1140,6 +1140,8 @@ def oembed(request):

    url = request.GET['url']
    parts = urlparse(url).path.split('/')
+    if not len(parts) < 2:
+        raise Http404
    public_id = parts[1]
    item = get_object_or_404_json(models.Item, public_id=public_id)
    embed_url = request.build_absolute_uri('/%s' % public_id)