fix: Handle non integer values passed to object_pk and replied_to (…

…#2012)
stephenmcd · Jan 5, 2022 · 4faee49 · 4faee49
1 parent b407cb7
commit 4faee49
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/mezzanine/generic/templatetags/comment_tags.py b/mezzanine/generic/templatetags/comment_tags.py
@@ -53,7 +53,7 @@ def comment_thread(context, parent):
     parent_id = parent.id if isinstance(parent, ThreadedComment) else None
     try:
         replied_to = int(context["request"].POST["replied_to"])
-    except KeyError:
+    except (KeyError, ValueError):
         replied_to = 0
     context.update(
         {

diff --git a/mezzanine/generic/views.py b/mezzanine/generic/views.py
@@ -84,7 +84,7 @@ def initial_validation(request, prefix):
         try:
             model = apps.get_model(*model_data)
             obj = model.objects.get(id=post_data.get("object_pk", None))
-        except (TypeError, ObjectDoesNotExist, LookupError):
+        except (TypeError, ObjectDoesNotExist, LookupError, ValueError):
             redirect_url = "/"
     if redirect_url:
         if request_is_ajax(request):