diff --git a/longs/views.py b/longs/views.py index 30dff861..6333c2ae 100755 --- a/longs/views.py +++ b/longs/views.py @@ -617,9 +617,10 @@ class LongSeriesView(LoginRequiredMixin, SingleTableMixin, FilterView): def loadJsonAnswer(answer): eid = int(answer["eid"].split("/")[1]) + cid = int(answer["cid"]) # As access is not restricted make sure the data appears valid - if (not isinstance(answer["cid"], int)) or ( + if (not isinstance(cid, int)) or ( not isinstance(eid, int) or (not isinstance(answer["ans"], str)) ): return False, JsonResponse( diff --git a/rapids/views.py b/rapids/views.py index d035d900..7d232c5d 100755 --- a/rapids/views.py +++ b/rapids/views.py @@ -510,9 +510,10 @@ class RapidView(LoginRequiredMixin, SingleTableMixin, FilterView): def loadJsonAnswer(answer): eid = int(answer["eid"].split("/")[1]) + cid = int(answer["cid"]) # As access is not restricted make sure the data appears valid - if (not isinstance(answer["cid"], int)) or ( + if (not isinstance(cid, int)) or ( not isinstance(eid, int) or (not isinstance(answer["ans"], str)) ): return False, JsonResponse(