Bug #80198
contrôle des données date sur les pages journal d'audit (ValueError: time data 'y0vya<script>alert(1)</script>sytqu' does not match format '%d/%m/%y')
Statut:
Fermé
Priorité:
Normal
Assigné à:
-
Version cible:
-
Début:
02 août 2023
Echéance:
% réalisé:
0%
Temps estimé:
Patch proposed:
Non
Planning:
Non
Description
https://sentry.entrouvert.org/entrouvert/publik/issues/113203/
ValueError: time data 'y0vya<script>alert(1)</script>sytqu' does not match format '%d/%m/%y' (10 additional frame(s) were not displayed) ... File "wcs/backoffice/journal.py", line 49, in _q_index dt = get_as_datetime(get_request().form.get('date')) File "wcs/qommon/misc.py", line 275, in get_as_datetime raise exception File "wcs/qommon/misc.py", line 272, in get_as_datetime return datetime.datetime.strptime(s, format_string) File "_strptime.py", line 568, in _strptime_datetime tt, fraction, gmtoff_fraction = _strptime(data_string, format) File "_strptime.py", line 349, in _strptime raise ValueError("time data %r does not match format %r" %