abort 400 if not schema

DOAJ · Apr 4, 2024 · b5ea347 · b5ea347
1 parent 8c6ebb9
commit b5ea347
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/portality/view/publisher.py b/portality/view/publisher.py
@@ -200,6 +200,8 @@ def upload_file():
     # otherwise we are dealing with a POST - file upload or supply of url
     f = request.files.get("file")
     schema = request.values.get("schema")
+    if not schema:
+        abort(400)
     url = request.values.get("upload-xml-link")
     resp = make_response(redirect(url_for("publisher.upload_file")))
     resp.set_cookie("schema", schema)