Escape argument for rmalias

2025-12-10 01:54:03 +01:00
parent d887acd164
commit ed7fd0d0f5
3 changed files with 2 additions and 133 deletions
--- a/views/mymailbox.py
+++ b/views/mymailbox.py
@@ -97,6 +97,7 @@ def myalias():
@mymailbox.route('/mymailbox/rmalias/<aliasrm>')
@login_required
 def remove_alias(aliasrm):
+    aliasrm = escape(aliasrm)
    if MAIL_SERVER:
        UTILISATEUR='%s' % escape(session['username'])
        conn = sqlite3.connect(DATABASE) # Connexion à la base de donnée