diff options
| author | Mark Sapiro <mark@msapiro.net> | 2010-03-29 13:48:11 -0700 |
|---|---|---|
| committer | Mark Sapiro <mark@msapiro.net> | 2010-03-29 13:48:11 -0700 |
| commit | 65d46a5c05a73e1ec5e73229730b4d30cbae4647 (patch) | |
| tree | 98704da13231ecf0eba407e46409d40074b884f3 /Mailman/Cgi/roster.py | |
| parent | f6d1105683699c64e4cbbad0a4dbc13edd4177d5 (diff) | |
| download | mailman2-65d46a5c05a73e1ec5e73229730b4d30cbae4647.tar.gz mailman2-65d46a5c05a73e1ec5e73229730b4d30cbae4647.tar.xz mailman2-65d46a5c05a73e1ec5e73229730b4d30cbae4647.zip | |
Added roster to the CGIs that return HTTP 401 status for an authentication
failure, and return HTTP 404 status from all CGIs for an invalid list name.
Diffstat (limited to '')
| -rw-r--r-- | Mailman/Cgi/roster.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Mailman/Cgi/roster.py b/Mailman/Cgi/roster.py index 8d06777d..d31608ff 100644 --- a/Mailman/Cgi/roster.py +++ b/Mailman/Cgi/roster.py @@ -54,6 +54,8 @@ def main(): except Errors.MMListError, e: # Avoid cross-site scripting attacks safelistname = Utils.websafe(listname) + # Send this with a 404 status. + print 'Status: 404 Not Found' error_page(_('No such list <em>%(safelistname)s</em>')) syslog('error', 'roster: no such list "%s": %s', listname, e) return @@ -99,6 +101,8 @@ def main(): realname = mlist.real_name doc = Document() doc.set_language(lang) + # Send this with a 401 status. + print 'Status: 401 Unauthorized' error_page_doc(doc, _('%(realname)s roster authentication failed.')) doc.AddItem(mlist.GetMailmanFooter()) print doc.Format() |