1
Fork 0
mirror of https://github.com/jech/galene.git synced 2024-12-22 07:15:47 +01:00

Return 404 errors for tokens in unknown groups.

This commit is contained in:
Juliusz Chroboczek 2024-12-04 13:32:51 +01:00
parent 8ad6a7e2d2
commit 9a6ed2c8c8

View file

@ -500,6 +500,12 @@ func tokensHandler(w http.ResponseWriter, r *http.Request, g, pth string) {
if !checkAdmin(w, r) { if !checkAdmin(w, r) {
return return
} }
// check that the group exists
_, err := group.GetDescription(g)
if err != nil {
httpError(w, err)
return
}
if pth == "/" { if pth == "/" {
if r.Method == "HEAD" || r.Method == "GET" { if r.Method == "HEAD" || r.Method == "GET" {
tokens, etag, err := token.List(g) tokens, etag, err := token.List(g)