We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9971ef3 commit 6ae52f1Copy full SHA for 6ae52f1
pgcommitfest/auth.py
@@ -211,7 +211,10 @@ def auth_receive(request):
211
# Finally, check of we have a data package that tells us where to
212
# redirect the user.
213
if 'd' in data:
214
- (nonces, datas, tags) = data['d'][0].split('$')
+ splitdata = data['d'][0].split('$')
215
+ if len(splitdata) != 3:
216
+ return HttpResponse("Invalid login pass-through data received, likely because of an old link. Please try again.")
217
+ (nonces, datas, tags) = splitdata
218
decryptor = AES.new(
219
SHA256.new(settings.SECRET_KEY.encode('ascii')).digest()[:32],
220
AES.MODE_SIV,
0 commit comments