fix possible information disclosure by describing coordinates

This commit is contained in:
Laura Klünder 2016-12-24 02:08:30 +01:00
parent fa8561b69a
commit 3f3b868e8a
2 changed files with 6 additions and 3 deletions

View file

@ -15,7 +15,7 @@ def get_location(request, name):
level = levels.get(match.group('level'))
if level is None:
return None
return PointLocation(level=level, x=int(match.group('x'))/100, y=int(match.group('y'))/100)
return PointLocation(level=level, x=int(match.group('x'))/100, y=int(match.group('y'))/100, request=request)
if name.startswith('g:'):
queryset = LocationGroup.objects.filter(Q(name=name[2:], can_search=True))