From 3a01b40657a69780461cd1748a56c992f88fa199 Mon Sep 17 00:00:00 2001 From: Antoine Nguyen Date: Thu, 1 May 2014 15:56:00 +0200 Subject: [PATCH] Disallow # character in filter names. fix #550 --- modoboa/extensions/sievefilters/forms.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/modoboa/extensions/sievefilters/forms.py b/modoboa/extensions/sievefilters/forms.py index afa3200e4..11047a395 100644 --- a/modoboa/extensions/sievefilters/forms.py +++ b/modoboa/extensions/sievefilters/forms.py @@ -97,6 +97,13 @@ class FilterForm(forms.Form): for a in actions: getattr(self, "_build_%s_field" % a[0])(request, a[1]) + def clean_name(self): + """Check that name does not contain strange chars. + """ + if '#' in self.cleaned_data["name"]: + raise forms.ValidationError(_("Wrong filter name")) + return self.cleaned_data["name"] + def _build_header_field(self, name, op, value): targets = [] ops = []