From c69403b0ce17274310a12c11795e5d0e6225f39e Mon Sep 17 00:00:00 2001
From: Ross <xkjq@ymail.com>
Date: Wed, 15 Dec 2021 19:01:58 +0000
Subject: [PATCH] .

---
 anatomy/views.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/anatomy/views.py b/anatomy/views.py
index a68bb5e8..4ab21484 100644
--- a/anatomy/views.py
+++ b/anatomy/views.py
@@ -223,6 +223,8 @@ def loadJsonAnswer(answer):
     # Backend eid is just the object pk number
     # in the frontend this is appended with the type
     # e.g. anatomy/1
+
+    # TODO Update to only allow valid CIDs
     eid = int(answer["eid"].split("/")[1])
     # As access is not restricted make sure the data appears valid
     if (not isinstance(answer["cid"], int)) or (